Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,299 total in npm · sorted newest first- Nov 20, 2024
Malicious code in eslint-tools (npm)
1 compromised version
- Nov 20, 2024
Malicious code in npm-cli-release-please (npm)
1 compromised version
- Nov 20, 2024
Malicious code in spex-node-client (npm)
1 compromised version
- Nov 20, 2024
Malicious code in spex-dts (npm)
1 compromised version
- Nov 20, 2024
Malicious code in s-page-legacy (npm)
1 compromised version
- Nov 20, 2024
Malicious code in short-link-sharer (npm)
1 compromised version
- Nov 20, 2024
Malicious code in shopee-ui (npm)
1 compromised version
- Nov 20, 2024
Malicious code in shopee-form-ui (npm)
1 compromised version
- Nov 20, 2024
Malicious code in react-fatigue-dev (npm)
1 compromised version
- Nov 20, 2024
Malicious code in node-elm-stdio (npm)
1 compromised version
- Nov 20, 2024
Malicious code in mangadex-archive-torrent-processor (npm)
1 compromised version
- Nov 20, 2024
Malicious code in filter-engine-ui (npm)
1 compromised version
- Nov 20, 2024
Malicious code in electron-request (npm)
1 compromised version
- Nov 20, 2024
Malicious code in river-build (npm)
1 compromised version
- Nov 20, 2024
Malicious code in galileo_staking (npm)
1 compromised version
- Nov 20, 2024
Malicious code in dapp-test-runner (npm)
1 compromised version
- Nov 20, 2024
Malicious code in cljs-dopeloop (npm)
1 compromised version
- Nov 20, 2024
Malicious code in camera-kit-react-native-example (npm)
2 compromised versions
- Nov 19, 2024
Malicious code in mona-service (npm)
1 compromised version
- Nov 19, 2024
Malicious code in mona-runtime (npm)
1 compromised version
- Nov 19, 2024
Malicious code in mona-client-mini (npm)
1 compromised version
- Nov 18, 2024
Malicious code in tautoak4-hello-world (npm)
1 compromised version
- Nov 18, 2024
Malicious code in tautoake4-hello-world (npm)
1 compromised version
- Nov 18, 2024
Malicious code in take2-hello-world (npm)
1 compromised version
- Nov 18, 2024
Malicious code in take3-hello-world (npm)
1 compromised version
- Nov 18, 2024
Malicious code in odin-security (npm)
5 compromised versions
- Nov 17, 2024
Malicious code in import-path-rewrite (npm)
2 compromised versions
- Nov 17, 2024
Malicious code in galaktika-components (npm)
1 compromised version
- Nov 17, 2024
Malicious code in ovh_sentry (npm)
1 compromised version
- Nov 17, 2024
Malicious code in theme-webpack (npm)
1 compromised version
- Nov 17, 2024
Malicious code in shopee-dashjs (npm)
1 compromised version
- Nov 17, 2024
Malicious code in seller-webchat-utils (npm)
1 compromised version
- Nov 16, 2024
Malicious code in cdh-data-portal-theme (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-webchat-modules (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-webchat-common (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-vuex-report-plugin (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-service (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-rn-mng-lib (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-return-common (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-pure-component (npm)
1 compromised version
- Nov 16, 2024
Malicious code in alex_evil-test-package (npm)
4 compromised versions
- Nov 16, 2024
Malicious code in seller-payment-service (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-package-common (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-node-logger (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-listing-rn-lib (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-listing-common (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-fulfillment-service (npm)
1 compromised version
- Nov 16, 2024
Malicious code in odyssey-storybook (npm)
3 compromised versions
- Nov 16, 2024
Malicious code in seller-fulfillment-common (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-core (npm)
1 compromised version
Page 6054 of 6,646