Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,299 total in npm · sorted newest first- Nov 13, 2024
Malware in byted-uploader
1 compromised version
- Nov 13, 2024
Malware in creative_design_client
1 compromised version
- Nov 13, 2024
Malware in byted-lightcharts
1 compromised version
- Nov 13, 2024
Malicious code in pasportt (npm)
- Nov 13, 2024
Malware in pasportt
1 compromised version
- Nov 13, 2024
Malicious code in chrtjs (npm)
- Nov 13, 2024
Malware in chrtjs
1 compromised version
- Nov 13, 2024
Malicious code in @sportdigi/bootstrapper (npm)
18 compromised versions
- Nov 13, 2024
Malicious code in @ps-i18/i18-utils (npm)
3 compromised versions
- Nov 13, 2024
Malicious code in styledcomps (npm)
- Nov 13, 2024
Malware in styledcomps
1 compromised version
- Nov 13, 2024
Malicious code in sazz (npm)
- Nov 13, 2024
Malware in sazz
1 compromised version
- Nov 13, 2024
Malicious code in litecor-lib (npm)
- Nov 13, 2024
Malware in litecor-lib
1 compromised version
- Nov 13, 2024
Malicious code in waletconnect (npm)
- Nov 13, 2024
Malware in waletconnect
1 compromised version
- Nov 13, 2024
Malicious code in export-pruner (npm)
1 compromised version
- Nov 13, 2024
Malicious code in hackerone000001 (npm)
1 compromised version
- Nov 13, 2024
Malicious code in hodkasia01 (npm)
1 compromised version
- Nov 13, 2024
Malicious code in eslint-plugin-wms (npm)
1 compromised version
- Nov 13, 2024
Malicious code in sixsense (npm)
1 compromised version
- Nov 13, 2024
Malicious code in eslint-plugin-unusedvar-fix (npm)
1 compromised version
- Nov 13, 2024
Malicious code in eslint-plugin-ssc (npm)
1 compromised version
- Nov 13, 2024
Malicious code in eslint-plugin-shopee (npm)
1 compromised version
- Nov 13, 2024
Malicious code in eslint-plugin-module-dependencies (npm)
1 compromised version
- Nov 13, 2024
Malicious code in eslint-plugin-mark-i18n (npm)
1 compromised version
- Nov 13, 2024
Malicious code in eslint-plugin-internal-playwright (npm)
1 compromised version
- Nov 13, 2024
Malicious code in eslint-plugin-foody-custom (npm)
1 compromised version
- Nov 12, 2024
Malicious code in docker-centos-hello (npm)
1 compromised version
- Nov 12, 2024
Malicious code in bitcor-mnemonic (npm)
- Nov 12, 2024
Malware in bitcor-mnemonic
1 compromised version
- Nov 12, 2024
Malicious code in bitcore-mnemic (npm)
- Nov 12, 2024
Malware in bitcore-mnemic
1 compromised version
- Nov 12, 2024
Malicious code in bitcore-mnemoic (npm)
- Nov 12, 2024
Malware in bitcore-mnemoic
1 compromised version
- Nov 12, 2024
Malicious code in bitcore-walet (npm)
- Nov 12, 2024
Malware in bitcore-walet
1 compromised version
- Nov 12, 2024
Malicious code in wavs-api (npm)
- Nov 12, 2024
Malware in wavs-api
1 compromised version
- Nov 12, 2024
Malicious code in monro (npm)
- Nov 12, 2024
Malware in monro
1 compromised version
- Nov 12, 2024
Malicious code in blockypher (npm)
- Nov 12, 2024
Malware in blockypher
1 compromised version
- Nov 12, 2024
Malicious code in chanlink (npm)
- Nov 12, 2024
Malware in chanlink
1 compromised version
- Nov 12, 2024
Malicious code in coinbse (npm)
- Nov 12, 2024
Malware in coinbse
1 compromised version
- Nov 12, 2024
Malicious code in web-sol-checker (npm)
- Nov 12, 2024
Malware in web-sol-checker
1 compromised version
Page 6058 of 6,646