Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,299 total in npm · sorted newest first- Nov 26, 2024
Malware in eds-vue
1 compromised version
- Nov 26, 2024
Malware in eds-charts-react
1 compromised version
- Nov 26, 2024
Malware in osm-legal-speed
1 compromised version
- Nov 26, 2024
Malware in team-plain
1 compromised version
- Nov 26, 2024
Malicious code in nativeapp-bridge (npm)
2 compromised versions
- Nov 26, 2024
Malware in wf-dbd-react-ui
1 compromised version
- Nov 26, 2024
Malware in nativeapp-bridge
1 compromised version
- Nov 26, 2024
Malware in wfui-digital-core
1 compromised version
- Nov 26, 2024
Malicious code in grapql-yoga (npm)
- Nov 26, 2024
Malware in grapql-yoga
1 compromised version
- Nov 26, 2024
Malware in emtoolsjs
1 compromised version
- Nov 26, 2024
Malicious code in undc (npm)
- Nov 26, 2024
Malware in undc
1 compromised version
- Nov 26, 2024
Malicious code in pmto (npm)
- Nov 26, 2024
Malware in pmto
1 compromised version
- Nov 26, 2024
Malicious code in n-http-proxy (npm)
- Nov 26, 2024
Malware in n-http-proxy
1 compromised version
- Nov 26, 2024
Malicious code in icf-react-components (npm)
- Nov 26, 2024
Malware in icf-react-components
1 compromised version
- Nov 26, 2024
Malicious code in hacker_for_pastebin (npm)
2 compromised versions
- Nov 26, 2024
Malware in hacker_for_pastebin
1 compromised version
- Nov 26, 2024
Malicious code in crypt-research (npm)
4 compromised versions
- Nov 26, 2024
Malware in crypt-research
1 compromised version
- Nov 26, 2024
Malicious code in cfc-i18n (npm)
1 compromised version
- Nov 26, 2024
Malware in cfc-i18n
1 compromised version
- Nov 25, 2024
Malicious code in clement-malicious-npm-package-1 (npm)
- Nov 25, 2024
Malware in clement-malicious-npm-package-1
1 compromised version
- Nov 25, 2024
Malicious code in thre-js (npm)
- Nov 25, 2024
Malware in thre-js
1 compromised version
- Nov 25, 2024
Malicious code in tetther (npm)
- Nov 25, 2024
Malware in tetther
1 compromised version
- Nov 25, 2024
Malicious code in tetherr (npm)
- Nov 25, 2024
Malware in tetherr
1 compromised version
- Nov 25, 2024
Malicious code in tehter (npm)
- Nov 25, 2024
Malware in tehter
1 compromised version
- Nov 25, 2024
Malicious code in nodmialer (npm)
- Nov 25, 2024
Malware in nodmialer
1 compromised version
- Nov 25, 2024
Malicious code in nodmailr (npm)
- Nov 25, 2024
Malware in nodmailr
1 compromised version
- Nov 25, 2024
Malicious code in neextjs (npm)
- Nov 25, 2024
Malware in neextjs
1 compromised version
- Nov 25, 2024
Malicious code in lito-core-lib (npm)
- Nov 25, 2024
Malware in lito-core-lib
1 compromised version
- Nov 25, 2024
Malicious code in litcore (npm)
- Nov 25, 2024
Malware in litcore
1 compromised version
- Nov 25, 2024
Malicious code in libbtc (npm)
- Nov 25, 2024
Malware in libbtc
1 compromised version
- Nov 25, 2024
Malicious code in testsdsdsdsd (npm)
1 compromised version
- Nov 25, 2024
Malicious code in eslint-config-video-supply (npm)
2 compromised versions
- Nov 25, 2024
Malware in eslint-config-video-supply
1 compromised version
Page 6051 of 6,646