Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,299 total in npm · sorted newest first- Nov 27, 2024
Malware in shopee-ui-automatic-import-loader
1 compromised version
- Nov 27, 2024
Malware in ssc-element-pro
1 compromised version
- Nov 27, 2024
Malicious code in json-schema-editor-visual-yapi (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in fulfillment-common (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in ads-common-components (npm)
3 compromised versions
- Nov 27, 2024
Malware in ads-common-components
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-internal-playwright
1 compromised version
- Nov 27, 2024
Malware in json-schema-editor-visual-yapi
1 compromised version
- Nov 27, 2024
Malware in fulfillment-common
1 compromised version
- Nov 27, 2024
Malicious code in spid-growth-notifier-config (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in shopee-rich-editor (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in release-platform-utils (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in react-common-lib (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in nodejs-prom-reporter (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in item-sold-count (npm)
1 compromised version
- Nov 27, 2024
Malicious code in fe-prometheus-report (npm)
2 compromised versions
- Nov 27, 2024
Malware in react-common-lib
1 compromised version
- Nov 27, 2024
Malware in spid-growth-notifier-config
1 compromised version
- Nov 27, 2024
Malware in shopee-rich-editor
1 compromised version
- Nov 27, 2024
Malware in seller-webchat-common
1 compromised version
- Nov 27, 2024
Malware in marketing-jest-cli
1 compromised version
- Nov 27, 2024
Malware in item-sold-count
1 compromised version
- Nov 27, 2024
Malware in seatalk-protocol
1 compromised version
- Nov 27, 2024
Malware in seller-fulfillment-common
1 compromised version
- Nov 27, 2024
Malware in fe-prometheus-report
1 compromised version
- Nov 27, 2024
Malware in release-platform-utils
1 compromised version
- Nov 27, 2024
Malware in nodejs-prom-reporter
1 compromised version
- Nov 27, 2024
Malicious code in vs-table-plugins-antd (npm)
1 compromised version
- Nov 27, 2024
Malicious code in tbi-editor (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in shopee-pcs-ui (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in seller-webchat-build-sdk (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in release-notice (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in react-big-calendar2 (npm)
1 compromised version
- Nov 27, 2024
Malware in release-notice
1 compromised version
- Nov 27, 2024
Malware in vs-table-plugins-antd
1 compromised version
- Nov 27, 2024
Malware in seller-webchat-build-sdk
1 compromised version
- Nov 27, 2024
Malware in seatalk-openapi
1 compromised version
- Nov 27, 2024
Malware in tbi-editor
1 compromised version
- Nov 27, 2024
Malware in spid-gc-ui-leaderboard
1 compromised version
- Nov 27, 2024
Malware in seller-core
1 compromised version
- Nov 27, 2024
Malware in shopee-pcs-ui
1 compromised version
- Nov 27, 2024
Malware in people-rn-common
1 compromised version
- Nov 27, 2024
Malware in react-big-calendar2
1 compromised version
- Nov 27, 2024
Malicious code in mystock-ui (npm)
1 compromised version
- Nov 27, 2024
Malicious code in item-card-sdk (npm)
1 compromised version
- Nov 27, 2024
Malware in marketing-eslint-check
1 compromised version
- Nov 27, 2024
Malware in item-card-sdk
1 compromised version
- Nov 27, 2024
Malware in export-pruner
1 compromised version
- Nov 27, 2024
Malware in mystock-ui
1 compromised version
- Nov 27, 2024
Malicious code in node-pyt (npm)
Page 6046 of 6,646