Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Nov 29, 2024
Malware in imgur-upload-api
1 compromised version
- Nov 29, 2024
Malware in nayan-media-downloader
1 compromised version
- Nov 29, 2024
Malware in nayan-server
1 compromised version
- Nov 29, 2024
Malware in n-hub
1 compromised version
- Nov 29, 2024
Malicious code in crypto-keccak (npm)
- Nov 29, 2024
Malicious code in crypto-jsonwebtoken (npm)
- Nov 29, 2024
Malicious code in crypto-bignumber (npm)
- Nov 29, 2024
Malware in crypto-keccak
1 compromised version
- Nov 29, 2024
Malware in crypto-bignumber
1 compromised version
- Nov 29, 2024
Malware in crypto-jsonwebtoken
1 compromised version
- Nov 29, 2024
Malicious code in http-proxi-cache (npm)
- Nov 29, 2024
Malware in http-proxi-cache
1 compromised version
- Nov 29, 2024
Malicious code in smtp2go (npm)
1 compromised version
- Nov 29, 2024
Malicious code in evermade-bare-theme (npm)
1 compromised version
- Nov 29, 2024
Malware in smtp2go
1 compromised version
- Nov 29, 2024
Malware in evermade-bare-theme
1 compromised version
- Nov 29, 2024
Malware in theme-webpack
1 compromised version
- Nov 29, 2024
Malicious code in qvector (npm)
6 compromised versions
- Nov 29, 2024
Malware in qvector
1 compromised version
- Nov 29, 2024
Malware in odyssey-storybook
1 compromised version
- Nov 29, 2024
Malicious code in notworking-v1 (npm)
- Nov 29, 2024
Malicious code in distdiscord-v11 (npm)
1 compromised version
- Nov 29, 2024
Malicious code in distdiscord-v1 (npm)
1 compromised version
- Nov 29, 2024
Malware in distdiscord-v11
1 compromised version
- Nov 29, 2024
Malware in distdiscord-v1
1 compromised version
- Nov 29, 2024
Malware in notworking-v1
1 compromised version
- Nov 29, 2024
Malicious code in network-web (npm)
1 compromised version
- Nov 29, 2024
Malware in network-web
1 compromised version
- Nov 29, 2024
Malware in import-path-rewrite
1 compromised version
- Nov 29, 2024
Malicious code in evil-package-for-test (npm)
3 compromised versions
- Nov 29, 2024
Malware in evil-package-for-test
1 compromised version
- Nov 29, 2024
Malicious code in randompathlist (npm)
- Nov 29, 2024
Malicious code in discord-json-requests (npm)
- Nov 29, 2024
Malware in discord-json-requests
1 compromised version
- Nov 29, 2024
Malware in randompathlist
1 compromised version
- Nov 29, 2024
Malware in cdh-data-portal-theme
1 compromised version
- Nov 29, 2024
Malware in alex_evil-test-package
1 compromised version
- Nov 29, 2024
Malware in techtrans
1 compromised version
- Nov 29, 2024
Malware in starter-assets-sass
1 compromised version
- Nov 29, 2024
Malicious code in agoda (npm)
1 compromised version
- Nov 29, 2024
Malware in hackerone000001
1 compromised version
- Nov 29, 2024
Malware in hodkasia01
1 compromised version
- Nov 29, 2024
Malware in agoda
1 compromised version
- Nov 29, 2024
Malware in sixsense
1 compromised version
- Nov 28, 2024
Malicious code in wxpc2024 (npm)
4 compromised versions
- Nov 28, 2024
Malicious code in wx-pocdev (npm)
- Nov 28, 2024
Malicious code in exwx (npm)
- Nov 28, 2024
Malicious code in cthwxpoc (npm)
- Nov 28, 2024
Malware in exwx
1 compromised version
- Nov 28, 2024
Malware in wixdevpoc
1 compromised version
Page 6041 of 6,647