Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,299 total in npm · sorted newest first- Nov 27, 2024
Malicious code in string-process-mate (npm)
1 compromised version
- Nov 27, 2024
Malware in string-process-mate
1 compromised version
- Nov 26, 2024
Malicious code in etherscancontracthandler (npm)
5 compromised versions
- Nov 26, 2024
Malware in etherscancontracthandler
1 compromised version
- Nov 26, 2024
Malware in comcast.github.io
1 compromised version
- Nov 26, 2024
Malicious code in kraken-wallet-cryptoicons (npm)
1 compromised version
- Nov 26, 2024
Malicious code in babel-plugin-error-context (npm)
1 compromised version
- Nov 26, 2024
Malware in babel-plugin-error-context
1 compromised version
- Nov 26, 2024
Malware in kraken-wallet-cryptoicons
1 compromised version
- Nov 26, 2024
Malware in bnppf-font-icons
1 compromised version
- Nov 26, 2024
Malicious code in uid2-publisher (npm)
1 compromised version
- Nov 26, 2024
Malicious code in tc-portal (npm)
1 compromised version
- Nov 26, 2024
Malware in language-matlab
1 compromised version
- Nov 26, 2024
Malware in nodepaysafesdk
1 compromised version
- Nov 26, 2024
Malware in paysafe-ia-v1-portal-backoffice-fe
1 compromised version
- Nov 26, 2024
Malware in matlab-language-server
1 compromised version
- Nov 26, 2024
Malware in nuclei-action
1 compromised version
- Nov 26, 2024
Malware in matitanium
1 compromised version
- Nov 26, 2024
Malicious code in kraken-wallet-network-icons (npm)
1 compromised version
- Nov 26, 2024
Malicious code in debugr1 (npm)
1 compromised version
- Nov 26, 2024
Malware in debugr1
1 compromised version
- Nov 26, 2024
Malware in kraken-wallet-network-icons
1 compromised version
- Nov 26, 2024
Malicious code in eager-blog (npm)
1 compromised version
- Nov 26, 2024
Malicious code in dep-validator-cli (npm)
2 compromised versions
- Nov 26, 2024
Malicious code in cs-shared-component-tools (npm)
1 compromised version
- Nov 26, 2024
Malicious code in config-sdk-nodejs (npm)
1 compromised version
- Nov 26, 2024
Malicious code in commitlint-plugin-rules-an (npm)
2 compromised versions
- Nov 26, 2024
Malicious code in commitlint-plugin-marketing-rules (npm)
2 compromised versions
- Nov 26, 2024
Malware in commitlint-plugin-jira-type-rules
1 compromised version
- Nov 26, 2024
Malware in cs-shared-component-tools
1 compromised version
- Nov 26, 2024
Malware in commitlint-plugin-marketing-rules
1 compromised version
- Nov 26, 2024
Malware in dep-validator-cli
1 compromised version
- Nov 26, 2024
Malware in commitlint-plugin-rules-an
1 compromised version
- Nov 26, 2024
Malware in cs-deploy-helper
1 compromised version
- Nov 26, 2024
Malware in cs-base-component
1 compromised version
- Nov 26, 2024
Malware in eager-blog
1 compromised version
- Nov 26, 2024
Malware in config-sdk-nodejs
1 compromised version
- Nov 26, 2024
Malware in dre-example
1 compromised version
- Nov 26, 2024
Malicious code in eslint-config-seller (npm)
2 compromised versions
- Nov 26, 2024
Malicious code in eslint-config-merchant-web (npm)
2 compromised versions
- Nov 26, 2024
Malicious code in eslint-config-merchant-rn (npm)
2 compromised versions
- Nov 26, 2024
Malware in eslint-config-merchant-web
1 compromised version
- Nov 26, 2024
Malware in eslint-config-seller
1 compromised version
- Nov 26, 2024
Malware in eslint-config-finance-node
1 compromised version
- Nov 26, 2024
Malware in eslint-config-merchant-rn
1 compromised version
- Nov 26, 2024
Malware in eslint-config-games
1 compromised version
- Nov 26, 2024
Malware in eslint-config-finance-rn
1 compromised version
- Nov 26, 2024
Malicious code in eds-charts-react (npm)
2 compromised versions
- Nov 26, 2024
Malware in eds-charts
1 compromised version
- Nov 26, 2024
Malware in eslint-config-finance
1 compromised version
Page 6050 of 6,646