Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Nov 28, 2024
Malware in cthwxpoc
1 compromised version
- Nov 28, 2024
Malware in wx-pocdev
1 compromised version
- Nov 28, 2024
Malware in wxpc2024
1 compromised version
- Nov 28, 2024
Malware in modlog-archive
1 compromised version
- Nov 28, 2024
Malware in spirvls
1 compromised version
- Nov 28, 2024
Malicious code in sol_web3_helper (npm)
- Nov 28, 2024
Malware in sol_web3_helper
1 compromised version
- Nov 28, 2024
Malicious code in req-ip-scope (npm)
- Nov 28, 2024
Malicious code in req-ip-ban (npm)
2 compromised versions
- Nov 28, 2024
Malware in req-ip-ban
1 compromised version
- Nov 28, 2024
Malware in req-ip-scope
1 compromised version
- Nov 28, 2024
Malicious code in galacticspacebananas (npm)
- Nov 28, 2024
Malicious code in etherscancontractinteraction (npm)
1 compromised version
- Nov 28, 2024
Malware in etherscancontractinteraction
1 compromised version
- Nov 28, 2024
Malware in galacticspacebananas
1 compromised version
- Nov 28, 2024
Malicious code in newbharatv3 (npm)
16 compromised versions
- Nov 28, 2024
Malware in newbharatv3
1 compromised version
- Nov 28, 2024
Malware in newbharatv1
1 compromised version
- Nov 27, 2024
Malicious code in fixexec (npm)
5 compromised versions
- Nov 27, 2024
Malware in fixexec
1 compromised version
- Nov 27, 2024
Malicious code in windowscleaner (npm)
1 compromised version
- Nov 27, 2024
Malicious code in spoofdownload (npm)
1 compromised version
- Nov 27, 2024
Malicious code in dogwiftools (npm)
- Nov 27, 2024
Malicious code in bruteforcetool (npm)
1 compromised version
- Nov 27, 2024
Malware in dogwiftools
1 compromised version
- Nov 27, 2024
Malware in windowscleaner
1 compromised version
- Nov 27, 2024
Malware in bruteforcetool
1 compromised version
- Nov 27, 2024
Malware in spoofdownload
1 compromised version
- Nov 27, 2024
Malicious code in spooferdownload (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in solarafixer (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in nlhybridfixer (npm)
7 compromised versions
- Nov 27, 2024
Malicious code in eacfix (npm)
1 compromised version
- Nov 27, 2024
Malware in eacfix
1 compromised version
- Nov 27, 2024
Malware in solarafixer
1 compromised version
- Nov 27, 2024
Malware in spooferdownload
1 compromised version
- Nov 27, 2024
Malware in nlhybridfixer
1 compromised version
- Nov 27, 2024
Malicious code in sync-ghes-actions (npm)
- Nov 27, 2024
Malicious code in github-script (npm)
- Nov 27, 2024
Malicious code in gaming_token (npm)
- Nov 27, 2024
Malicious code in assetmantle (npm)
- Nov 27, 2024
Malicious code in action-deploy (npm)
- Nov 27, 2024
Malicious code in aa-bundler (npm)
- Nov 27, 2024
Malware in my-wallet-backupt-decryption-tool
1 compromised version
- Nov 27, 2024
Malware in eslint-tools
1 compromised version
- Nov 27, 2024
Malware in github-script
1 compromised version
- Nov 27, 2024
Malware in aa-bundler
1 compromised version
- Nov 27, 2024
Malware in assetmantle
1 compromised version
- Nov 27, 2024
Malware in sync-ghes-actions
1 compromised version
- Nov 27, 2024
Malware in gaming_token
1 compromised version
- Nov 27, 2024
Malware in river-build
1 compromised version
Page 6042 of 6,647