Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Dec 13, 2024
Malicious code in imran-downloader (npm)
- Dec 13, 2024
Malicious code in imran-dlmedia (npm)
10 compromised versions
- Dec 13, 2024
Malicious code in imgur-uploader-api (npm)
- Dec 13, 2024
Malicious code in font-style-api (npm)
- Dec 13, 2024
Malicious code in fca-imran-api (npm)
- Dec 13, 2024
Malware in imran-downloader-servar
1 compromised version
- Dec 13, 2024
Malware in imran-downloader
1 compromised version
- Dec 13, 2024
Malware in imran-servar
1 compromised version
- Dec 13, 2024
Malware in imran-spotifydl
1 compromised version
- Dec 13, 2024
Malware in imran-dlmedia
1 compromised version
- Dec 13, 2024
Malware in imgur-uploader-api
1 compromised version
- Dec 13, 2024
Malware in font-style-api
1 compromised version
- Dec 13, 2024
Malware in fca-imran-api
1 compromised version
- Dec 12, 2024
Malicious code in azuredatastudio (npm)
2 compromised versions
- Dec 12, 2024
Malicious code in vscode-reh-rce (npm)
1 compromised version
- Dec 12, 2024
Malicious code in yir-image-gen-asana-rce (npm)
1 compromised version
- Dec 12, 2024
Malicious code in test-rce3 (npm)
1 compromised version
- Dec 12, 2024
Malicious code in planweb-core-ui (npm)
15 compromised versions
- Dec 12, 2024
Malicious code in testin-elengo (npm)
1 compromised version
- Dec 12, 2024
Malicious code in testing-example-amnu (npm)
1 compromised version
- Dec 12, 2024
Malicious code in testin-elengos (npm)
1 compromised version
- Dec 12, 2024
Malicious code in pacbot-spa (npm)
2 compromised versions
- Dec 12, 2024
Malicious code in bug-bounttest (npm)
1 compromised version
- Dec 12, 2024
Malicious code in dextester123 (npm)
1 compromised version
- Dec 12, 2024
Malicious code in @infoserver/gov-shared-ui (npm)
1 compromised version
- Dec 12, 2024
Malicious code in raptor-library (npm)
2 compromised versions
- Dec 12, 2024
Malicious code in letstryout (npm)
1 compromised version
- Dec 12, 2024
Malicious code in discord-json-scaller (npm)
- Dec 12, 2024
Malware in discord-json-scaller
1 compromised version
- Dec 12, 2024
Malicious code in majidalfuttaim (npm)
1 compromised version
- Dec 12, 2024
Malicious code in fidentity-website (npm)
1 compromised version
- Dec 12, 2024
Malicious code in qwertytrtyu (npm)
1 compromised version
- Dec 12, 2024
Malware in nextcloud2
1 compromised version
- Dec 12, 2024
Malware in dexter123
1 compromised version
- Dec 12, 2024
Malware in tripadvisor-npm
1 compromised version
- Dec 12, 2024
Malware in promisified-resource-pool123
1 compromised version
- Dec 12, 2024
Malware in qwertytrtyu
1 compromised version
- Dec 12, 2024
Malicious code in nextcloud1 (npm)
1 compromised version
- Dec 12, 2024
Malware in nextcloud1
1 compromised version
- Dec 12, 2024
Malicious code in nayan-api-server (npm)
- Dec 12, 2024
Malware in nayan-api-server
1 compromised version
- Dec 12, 2024
Malicious code in nayan-video-downloader (npm)
- Dec 12, 2024
Malicious code in nayan-imgur-upload-api (npm)
- Dec 12, 2024
Malware in nayan-imgur-upload-api
1 compromised version
- Dec 12, 2024
Malware in nayan-video-downloader
1 compromised version
- Dec 12, 2024
Malicious code in fake-yaml (npm)
4 compromised versions
- Dec 12, 2024
Malicious code in fake-emitter (npm)
5 compromised versions
- Dec 12, 2024
Malware in fake-emitter-no-schema
1 compromised version
- Dec 12, 2024
Malware in jquery.slideviewer
1 compromised version
- Dec 12, 2024
Malware in fake-yaml
1 compromised version
Page 6030 of 6,647