Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,299 total in npm · sorted newest first- Nov 27, 2024
Malicious code in chokader (npm)
1 compromised version
- Nov 27, 2024
Malware in node-pyt
1 compromised version
- Nov 27, 2024
Malware in chokader
1 compromised version
- Nov 27, 2024
Malicious code in streamserch (npm)
6 compromised versions
- Nov 27, 2024
Malicious code in sss2h (npm)
1 compromised version
- Nov 27, 2024
Malicious code in parimiko (npm)
- Nov 27, 2024
Malicious code in npmrunnall (npm)
1 compromised version
- Nov 27, 2024
Malicious code in babelcl (npm)
1 compromised version
- Nov 27, 2024
Malware in babelcl
1 compromised version
- Nov 27, 2024
Malware in streamserch
1 compromised version
- Nov 27, 2024
Malware in parimiko
1 compromised version
- Nov 27, 2024
Malware in npmrunnall
1 compromised version
- Nov 27, 2024
Malware in sss2h
1 compromised version
- Nov 27, 2024
Malicious code in web-framework-addons (npm)
2 compromised versions
- Nov 27, 2024
Malware in web-framework-addons
1 compromised version
- Nov 27, 2024
Malicious code in qassam22 (npm)
1 compromised version
- Nov 27, 2024
Malware in qassam22
1 compromised version
- Nov 27, 2024
Malware in docker-centos-hello
1 compromised version
- Nov 27, 2024
Malicious code in testing-react-jsme (npm)
- Nov 27, 2024
Malware in aem-core-react-components
1 compromised version
- Nov 27, 2024
Malware in testing-react-jsme
1 compromised version
- Nov 27, 2024
Malicious code in sling-calendar-sdk (npm)
2 compromised versions
- Nov 27, 2024
Malware in sling-calendar-sdk
1 compromised version
- Nov 27, 2024
Malicious code in internallib_v605 (npm)
4 compromised versions
- Nov 27, 2024
Malware in internallib_v605
1 compromised version
- Nov 27, 2024
Malicious code in test-generator-plugin (npm)
1 compromised version
- Nov 27, 2024
Malware in shopee-ui
1 compromised version
- Nov 27, 2024
Malware in test-generator-plugin
1 compromised version
- Nov 27, 2024
Malware in seller-webchat-modules
1 compromised version
- Nov 27, 2024
Malware in web-chat-portal
1 compromised version
- Nov 27, 2024
Malware in spid-sharing-panel
1 compromised version
- Nov 27, 2024
Malware in seller-fulfillment-service
1 compromised version
- Nov 27, 2024
Malicious code in secure-fetch-utils-latest (npm)
1 compromised version
- Nov 27, 2024
Malicious code in people-web-log (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in node-prom-reporter (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in jira-rest-typescript (npm)
1 compromised version
- Nov 27, 2024
Malicious code in eslint-plugin-fulfillment-lint (npm)
3 compromised versions
- Nov 27, 2024
Malicious code in eslint-plugin-finance (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in eslint-plugin-classification-import (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in eslint-config-sipplint (npm)
1 compromised version
- Nov 27, 2024
Malicious code in eslint-config-sipp (npm)
1 compromised version
- Nov 27, 2024
Malicious code in eslint-config-loan (npm)
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-add-display-name
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-classification-import
1 compromised version
- Nov 27, 2024
Malware in eslint-config-finance-web-react
1 compromised version
- Nov 27, 2024
Malware in markomponent
1 compromised version
- Nov 27, 2024
Malware in secure-fetch-utils-latest
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-cognitive-complexity
1 compromised version
- Nov 27, 2024
Malware in people-web-log
1 compromised version
- Nov 27, 2024
Malware in eslint-config-loan
1 compromised version
Page 6047 of 6,646