Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,299 total in npm · sorted newest first- Nov 27, 2024
Malware in node-prom-reporter
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-foody-custom
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-finance
1 compromised version
- Nov 27, 2024
Malware in eslint-config-sipp
1 compromised version
- Nov 27, 2024
Malware in eslint-config-sipplint
1 compromised version
- Nov 27, 2024
Malware in jira-rest-typescript
1 compromised version
- Nov 27, 2024
Malware in retail-common
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-fulfillment-lint
1 compromised version
- Nov 27, 2024
Malware in react-dnd11
1 compromised version
- Nov 27, 2024
Malicious code in internallib_v268 (npm)
1 compromised version
- Nov 27, 2024
Malware in internallib_v268
1 compromised version
- Nov 27, 2024
Malicious code in yapi-plugin-games-google-login (npm)
1 compromised version
- Nov 27, 2024
Malware in viewercontext
1 compromised version
- Nov 27, 2024
Malware in yapi-plugin-games-google-login
1 compromised version
- Nov 27, 2024
Malicious code in ssc-user-guide-pro (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in seller-webchat-ui (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in rct-centered-text (npm)
1 compromised version
- Nov 27, 2024
Malicious code in multi-module-framework (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in isc-frontend (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in eslint-plugin-video (npm)
1 compromised version
- Nov 27, 2024
Malicious code in cmt-common (npm)
2 compromised versions
- Nov 27, 2024
Malware in ssc-user-guide-pro
1 compromised version
- Nov 27, 2024
Malware in scfe-joint-test-tool
1 compromised version
- Nov 27, 2024
Malware in isc-frontend
1 compromised version
- Nov 27, 2024
Malware in people-ats-common
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-video
1 compromised version
- Nov 27, 2024
Malware in seller-service
1 compromised version
- Nov 27, 2024
Malware in rct-centered-text
1 compromised version
- Nov 27, 2024
Malware in seller-center-puppeteer
1 compromised version
- Nov 27, 2024
Malware in cmt-common
1 compromised version
- Nov 27, 2024
Malware in spex-node-client
1 compromised version
- Nov 27, 2024
Malware in seller-webchat-ui
1 compromised version
- Nov 27, 2024
Malware in multi-module-framework
1 compromised version
- Nov 27, 2024
Malware in magic-umi-request
1 compromised version
- Nov 27, 2024
Malware in realtime-translation-package
1 compromised version
- Nov 27, 2024
Malicious code in wms-printer (npm)
- Nov 27, 2024
Malicious code in ssc-ui-vue-pro (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in seller-base.environment (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in scan-cli (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in react-pro-components-next (npm)
1 compromised version
- Nov 27, 2024
Malicious code in rc-tabs-new (npm)
1 compromised version
- Nov 27, 2024
Malicious code in patch-package-lucky-video (npm)
1 compromised version
- Nov 27, 2024
Malicious code in monorepo-release-cli (npm)
2 compromised versions
- Nov 27, 2024
Malware in patch-package-lucky-video
1 compromised version
- Nov 27, 2024
Malware in s-page-legacy
1 compromised version
- Nov 27, 2024
Malware in react-pro-components-next
1 compromised version
- Nov 27, 2024
Malware in rc-tabs-new
1 compromised version
- Nov 27, 2024
Malware in monorepo-release-cli
1 compromised version
- Nov 27, 2024
Malware in seller-return-common
1 compromised version
- Nov 27, 2024
Malware in uss-vod-js-sdk
1 compromised version
Page 6048 of 6,646