Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,299 total in npm · sorted newest first- Nov 16, 2024
Malicious code in seller-common (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-center-puppeteer (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-base.preview (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-base (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-assistance-service (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-assistance-common (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-admin-common (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-address-common (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seatalk-protocol (npm)
1 compromised version
- Nov 16, 2024
Malicious code in galaktika-components-test (npm)
3 compromised versions
- Nov 16, 2024
Malicious code in seatalk-openapi (npm)
1 compromised version
- Nov 16, 2024
Malicious code in scm-retail-ui (npm)
1 compromised version
- Nov 16, 2024
Malicious code in scfe-joint-test-tool (npm)
1 compromised version
- Nov 16, 2024
Malicious code in sc-case-dispute (npm)
1 compromised version
- Nov 15, 2024
Malicious code in rollup-plugin-amd-output-enhance (npm)
1 compromised version
- Nov 15, 2024
Malicious code in rn-native-portals (npm)
1 compromised version
- Nov 15, 2024
Malicious code in rn-i18n-extensions (npm)
1 compromised version
- Nov 15, 2024
Malicious code in rich-text-slate-rc (npm)
1 compromised version
- Nov 15, 2024
Malicious code in retail-common (npm)
1 compromised version
- Nov 15, 2024
Malicious code in redux-store-immutable (npm)
1 compromised version
- Nov 15, 2024
Malicious code in realtime-translation-package (npm)
1 compromised version
- Nov 15, 2024
Malicious code in @fhnw/angular-app-configuration (npm)
2 compromised versions
- Nov 15, 2024
Malicious code in spirvls (npm)
2 compromised versions
- Nov 15, 2024
Malicious code in ffers (npm)
1 compromised version
- Nov 15, 2024
Malicious code in react-pro-components (npm)
1 compromised version
- Nov 15, 2024
Malicious code in react-is-16 (npm)
1 compromised version
- Nov 15, 2024
Malicious code in @freshworksinc/haxer (npm)
1 compromised version
- Nov 15, 2024
Malicious code in react-dnd11 (npm)
1 compromised version
- Nov 15, 2024
Malicious code in libpnpmpublish (npm)
1 compromised version
- Nov 15, 2024
Malicious code in evocateur_libpnpmpublish (npm)
1 compromised version
- Nov 15, 2024
Malicious code in evocateur_libpnpmpublisher (npm)
1 compromised version
- Nov 15, 2024
Malicious code in evocateur_libpnpmpublishing (npm)
1 compromised version
- Nov 15, 2024
Malicious code in evocater_libpnpmpublish (npm)
1 compromised version
- Nov 15, 2024
Malicious code in libnpmpublishing (npm)
1 compromised version
- Nov 15, 2024
Malicious code in libnpmpublisher (npm)
1 compromised version
- Nov 15, 2024
Malicious code in evocataur (npm)
1 compromised version
- Nov 15, 2024
Malicious code in newbharatv2 (npm)
1 compromised version
- Nov 15, 2024
Malicious code in newbharatv1 (npm)
2 compromised versions
- Nov 15, 2024
Malicious code in rct-calculator (npm)
1 compromised version
- Nov 15, 2024
Malicious code in quality-cli (npm)
1 compromised version
- Nov 15, 2024
Malicious code in erc4337 (npm)
2 compromised versions
- Nov 15, 2024
Malicious code in atlas-query-editor (npm)
6 compromised versions
- Nov 15, 2024
Malicious code in pvct-cli (npm)
1 compromised version
- Nov 15, 2024
Malicious code in aptos-mint (npm)
1 compromised version
- Nov 15, 2024
Malicious code in prettier-plugin-kimi-i18next (npm)
1 compromised version
- Nov 15, 2024
Malicious code in preact-cli-build (npm)
1 compromised version
- Nov 15, 2024
Malicious code in cb-cookie-manager (npm)
1 compromised version
- Nov 15, 2024
Malicious code in polaris-report (npm)
1 compromised version
- Nov 14, 2024
Malicious code in people-rn-common (npm)
1 compromised version
- Nov 14, 2024
Malicious code in @freshworksinc/platform-application (npm)
1 compromised version
Page 6055 of 6,646