Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,299 total in npm · sorted newest first- Nov 27, 2024
Malware in wms-printer
1 compromised version
- Nov 27, 2024
Malware in scan-cli
1 compromised version
- Nov 27, 2024
Malware in react-fatigue-dev
1 compromised version
- Nov 27, 2024
Malware in ssc-ui-vue-pro
1 compromised version
- Nov 27, 2024
Malware in listing-uss-sdk
1 compromised version
- Nov 27, 2024
Malware in seller-base.environment
1 compromised version
- Nov 27, 2024
Malware in careers-job-detail
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-ssc
1 compromised version
- Nov 27, 2024
Malware in hubot-hangouts
1 compromised version
- Nov 27, 2024
Malware in odin-security
1 compromised version
- Nov 27, 2024
Malware in sa11y-monorepo
1 compromised version
- Nov 27, 2024
Malicious code in refocus-logging (npm)
1 compromised version
- Nov 27, 2024
Malware in refocus-sgt-trust1
1 compromised version
- Nov 27, 2024
Malware in nordic-dev
1 compromised version
- Nov 27, 2024
Malware in refocus-real-time
1 compromised version
- Nov 27, 2024
Malware in akita-poc
1 compromised version
- Nov 27, 2024
Malware in refocus-logging
1 compromised version
- Nov 27, 2024
Malicious code in web_enhance_sap-stable (npm)
1 compromised version
- Nov 27, 2024
Malicious code in tracking-wtf (npm)
1 compromised version
- Nov 27, 2024
Malicious code in ssc-mobile-ui-react (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in shopee-ui-react4 (npm)
1 compromised version
- Nov 27, 2024
Malicious code in onboarding-ops (npm)
2 compromised versions
- Nov 27, 2024
Malware in seller-listing-rn-lib
1 compromised version
- Nov 27, 2024
Malware in seller-address-common
1 compromised version
- Nov 27, 2024
Malware in react-dom-16
1 compromised version
- Nov 27, 2024
Malware in ssc-mobile-ui-react
1 compromised version
- Nov 27, 2024
Malware in polaris-report
1 compromised version
- Nov 27, 2024
Malware in shopee-ui-react4
1 compromised version
- Nov 27, 2024
Malware in web_enhance_sap-stable
1 compromised version
- Nov 27, 2024
Malware in dapp-test-runner
1 compromised version
- Nov 27, 2024
Malware in tracking-wtf
1 compromised version
- Nov 27, 2024
Malware in rn-i18n-extensions
1 compromised version
- Nov 27, 2024
Malware in onboarding-ops
1 compromised version
- Nov 27, 2024
Malicious code in json-tree-preview (npm)
1 compromised version
- Nov 27, 2024
Malicious code in fulfillment-portal-common (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in eslint-plugin-locale (npm)
1 compromised version
- Nov 27, 2024
Malware in ads-common-utils
1 compromised version
- Nov 27, 2024
Malware in json-tree-preview
1 compromised version
- Nov 27, 2024
Malware in mdap-cli
1 compromised version
- Nov 27, 2024
Malware in fulfillment-portal-common
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-locale
1 compromised version
- Nov 27, 2024
Malicious code in xenoupdater (npm)
- Nov 27, 2024
Malware in xenoupdater
1 compromised version
- Nov 27, 2024
Malicious code in updsolara (npm)
1 compromised version
- Nov 27, 2024
Malicious code in updasolara (npm)
1 compromised version
- Nov 27, 2024
Malware in updsolara
1 compromised version
- Nov 27, 2024
Malware in updasolara
1 compromised version
- Nov 27, 2024
Malicious code in malicious_sleep_package (npm)
- Nov 27, 2024
Malware in malicious_sleep_package
1 compromised version
- Nov 27, 2024
Malware in tcms-malicious-package-test-1
1 compromised version
Page 6049 of 6,646