Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Nov 27, 2024
Malware in action-deploy
1 compromised version
- Nov 27, 2024
Malware in npm-cli-release-please
1 compromised version
- Nov 27, 2024
Malicious code in ruby-lsp (npm)
- Nov 27, 2024
Malicious code in nft-dapp-starter-kit (npm)
- Nov 27, 2024
Malware in nft-dapp-starter-kit
1 compromised version
- Nov 27, 2024
Malware in galileo_staking
1 compromised version
- Nov 27, 2024
Malware in erc4337
1 compromised version
- Nov 27, 2024
Malware in ruby-lsp
1 compromised version
- Nov 27, 2024
Malicious code in rlending-protocol (npm)
3 compromised versions
- Nov 27, 2024
Malware in rlending-protocol
1 compromised version
- Nov 27, 2024
Malware in lending-vault
1 compromised version
- Nov 27, 2024
Malicious code in proton-vpn-browser-extension (npm)
1 compromised version
- Nov 27, 2024
Malware in proton-vpn-browser-extension
1 compromised version
- Nov 27, 2024
Malicious code in nikmodzp (npm)
1 compromised version
- Nov 27, 2024
Malware in nikmodzp
1 compromised version
- Nov 27, 2024
Malicious code in ssc-ui-vue (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in soybean-admin-tab (npm)
18 compromised versions
- Nov 27, 2024
Malware in upload-to-shopee-cdn
1 compromised version
- Nov 27, 2024
Malware in ssc-ui-vue
1 compromised version
- Nov 27, 2024
Malware in soybean-admin-tab
1 compromised version
- Nov 27, 2024
Malicious code in seller-base-common (npm)
- Nov 27, 2024
Malicious code in rtn-centered-text (npm)
1 compromised version
- Nov 27, 2024
Malicious code in parcel-plugin-lighterhtm (npm)
1 compromised version
- Nov 27, 2024
Malicious code in eslint-plugin-sls-fe-lint (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in eslint-formatter-richhtml (npm)
2 compromised versions
- Nov 27, 2024
Malware in listing-sc-lint
1 compromised version
- Nov 27, 2024
Malware in quality-cli
1 compromised version
- Nov 27, 2024
Malware in node-elm-stdio
1 compromised version
- Nov 27, 2024
Malware in seller-base-common
1 compromised version
- Nov 27, 2024
Malware in react-pro-components
1 compromised version
- Nov 27, 2024
Malware in http-long-poll-server
1 compromised version
- Nov 27, 2024
Malware in module-json-validator
1 compromised version
- Nov 27, 2024
Malware in seller-pure-component
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-sls-fe-lint
1 compromised version
- Nov 27, 2024
Malware in eslint-formatter-richhtml
1 compromised version
- Nov 27, 2024
Malware in parcel-plugin-lighterhtm
1 compromised version
- Nov 27, 2024
Malware in rtn-centered-text
1 compromised version
- Nov 27, 2024
Malicious code in rnt-demo-text (npm)
1 compromised version
- Nov 27, 2024
Malware in seller-package-common
1 compromised version
- Nov 27, 2024
Malware in ts-diagnosis
1 compromised version
- Nov 27, 2024
Malware in webpack-insert-sentry-plugin
1 compromised version
- Nov 27, 2024
Malware in shopee-dashjs
1 compromised version
- Nov 27, 2024
Malware in short-link-sharer
1 compromised version
- Nov 27, 2024
Malware in electron-request
1 compromised version
- Nov 27, 2024
Malware in seller-assistance-common
1 compromised version
- Nov 27, 2024
Malware in rnt-demo-text
1 compromised version
- Nov 27, 2024
Malware in ssc-ui-react
1 compromised version
- Nov 27, 2024
Malicious code in react-domain-components (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in operation-server-sdk (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in linencloth (npm)
1 compromised version
Page 6043 of 6,647