Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Dec 9, 2024
Malicious code in kskjdksjdks (npm)
1 compromised version
- Dec 9, 2024
Malicious code in ksdsjdksjmncnjsdmsnd (npm)
1 compromised version
- Dec 9, 2024
Malicious code in keli-dywomen (npm)
1 compromised version
- Dec 9, 2024
Malicious code in kali-dywoman (npm)
1 compromised version
- Dec 9, 2024
Malicious code in jsmaterialx (npm)
1 compromised version
- Dec 9, 2024
Malicious code in js-austt (npm)
1 compromised version
- Dec 9, 2024
Malicious code in itminepack101 (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in internallib_v495 (npm)
3 compromised versions
- Dec 9, 2024
Malicious code in ilogtail (npm)
1 compromised version
- Dec 9, 2024
Malicious code in iherb-react-environment (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in iconpark (npm)
1 compromised version
- Dec 9, 2024
Malicious code in i18-utils (npm)
1 compromised version
- Dec 9, 2024
Malicious code in hwidrefresh (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in hosted-buttons (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in gradio-ui (npm)
1 compromised version
- Dec 9, 2024
Malicious code in get-matcha (npm)
1 compromised version
- Dec 9, 2024
Malicious code in ganash (npm)
1 compromised version
- Dec 9, 2024
Malicious code in frontpfr (npm)
1 compromised version
- Dec 9, 2024
Malicious code in fisch (npm)
1 compromised version
- Dec 9, 2024
Malicious code in finaustt (npm)
1 compromised version
- Dec 9, 2024
Malicious code in facet-mmleditor (npm)
1 compromised version
- Dec 9, 2024
Malicious code in evocateur_libnpmpublisher (npm)
1 compromised version
- Dec 9, 2024
Malicious code in evocateur_libnpmpublisheing (npm)
1 compromised version
- Dec 9, 2024
Malicious code in evocateur_libnpmpublic (npm)
1 compromised version
- Dec 9, 2024
Malicious code in evocateur-libnpmpublish (npm)
1 compromised version
- Dec 9, 2024
Malicious code in evocater_libpnpmpublic (npm)
1 compromised version
- Dec 9, 2024
Malicious code in evocater_libnpmpublish (npm)
1 compromised version
- Dec 9, 2024
Malicious code in eth-austt (npm)
1 compromised version
- Dec 9, 2024
Malicious code in eslint-plugin-woocommerce (npm)
1 compromised version
- Dec 9, 2024
Malicious code in eslint-config-ui-core-base (npm)
1 compromised version
- Dec 9, 2024
Malicious code in eslint-config-onyx-ui-base (npm)
1 compromised version
- Dec 9, 2024
Malicious code in eslint-config-goldeneye (npm)
1 compromised version
- Dec 9, 2024
Malicious code in ens-austt (npm)
1 compromised version
- Dec 9, 2024
Malicious code in elkeid (npm)
1 compromised version
- Dec 9, 2024
Malicious code in electron_npm_deps (npm)
3 compromised versions
- Dec 9, 2024
Malicious code in eff-minifeapp (npm)
1 compromised version
- Dec 9, 2024
Malicious code in docs-ux (npm)
1 compromised version
- Dec 9, 2024
Malicious code in discord-clone (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in dependency-confusion-poc777 (npm)
1 compromised version
- Dec 8, 2024
Malicious code in danum (npm)
1 compromised version
- Dec 8, 2024
Malicious code in cyepoc (npm)
1 compromised version
- Dec 8, 2024
Malicious code in crypto-latest (npm)
1 compromised version
- Dec 8, 2024
Malicious code in create-semi-d2c-plugin (npm)
1 compromised version
- Dec 8, 2024
Malicious code in composed-react-app (npm)
2 compromised versions
- Dec 8, 2024
Malicious code in complire (npm)
1 compromised version
- Dec 8, 2024
Malicious code in complier (npm)
1 compromised version
- Dec 8, 2024
Malicious code in compilre (npm)
1 compromised version
- Dec 8, 2024
Malicious code in com.nethereum.unity (npm)
2 compromised versions
- Dec 8, 2024
Malicious code in chime-ui (npm)
3 compromised versions
- Dec 8, 2024
Malicious code in check-deps-version-consistency (npm)
1 compromised version
Page 6035 of 6,647