Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,299 total in npm · sorted newest first- Nov 10, 2024
Malicious code in bdc-materials (npm)
1 compromised version
- Nov 10, 2024
Malicious code in sa11y-monorepo (npm)
1 compromised version
- Nov 10, 2024
Malicious code in refocus-real-time (npm)
2 compromised versions
- Nov 10, 2024
Malicious code in nordic-dev (npm)
3 compromised versions
- Nov 10, 2024
Malicious code in airpay-js-sdk (npm)
1 compromised version
- Nov 10, 2024
Malicious code in akita-poc (npm)
1 compromised version
- Nov 10, 2024
Malicious code in ads-common-utils (npm)
1 compromised version
- Nov 9, 2024
Malicious code in paysafe-ia-v1-portal-backoffice-fe (npm)
1 compromised version
- Nov 9, 2024
Malicious code in aseemnpmk (npm)
1 compromised version
- Nov 8, 2024
Malicious code in nfs-server-alpine (npm)
1 compromised version
- Nov 8, 2024
Malicious code in octopus-library (npm)
1 compromised version
- Nov 8, 2024
Malicious code in poc-lelouch (npm)
1 compromised version
- Nov 8, 2024
Malicious code in koho-charity-api (npm)
1 compromised version
- Nov 8, 2024
Malicious code in plaidreactnativedemo (npm)
1 compromised version
- Nov 8, 2024
Malicious code in mongoose-4 (npm)
1 compromised version
- Nov 8, 2024
Malicious code in spliffy-benchmark (npm)
1 compromised version
- Nov 8, 2024
Malicious code in dancer-pipeline (npm)
1 compromised version
- Nov 8, 2024
Malicious code in quill-icons-park (npm)
2 compromised versions
- Nov 8, 2024
Malicious code in deriv-app-id-action (npm)
1 compromised version
- Nov 8, 2024
Malicious code in pixiv-novel-editor (npm)
1 compromised version
- Nov 8, 2024
Malicious code in xcasset-gen (npm)
1 compromised version
- Nov 8, 2024
Malicious code in sinbad-dev (npm)
1 compromised version
- Nov 8, 2024
Malicious code in embrace-helloworld (npm)
1 compromised version
- Nov 8, 2024
Malicious code in autolink-jira-issue (npm)
1 compromised version
- Nov 8, 2024
Malicious code in activity_logs_monitoring (npm)
1 compromised version
- Nov 8, 2024
Malicious code in testing-logger-bush1do-c0de (npm)
7 compromised versions
- Nov 8, 2024
Malicious code in solara (npm)
- Nov 8, 2024
Malware in solara
1 compromised version
- Nov 8, 2024
Malicious code in bitg (npm)
- Nov 8, 2024
Malware in bitg
1 compromised version
- Nov 8, 2024
Malicious code in bcin (npm)
- Nov 8, 2024
Malware in bcin
1 compromised version
- Nov 8, 2024
Malicious code in tokns (npm)
- Nov 8, 2024
Malware in tokns
1 compromised version
- Nov 8, 2024
Malicious code in eth-rpceerrors (npm)
- Nov 8, 2024
Malware in eth-rpceerrors
1 compromised version
- Nov 8, 2024
Malicious code in ethmetadata (npm)
- Nov 8, 2024
Malware in ethmetadata
1 compromised version
- Nov 8, 2024
Malicious code in eth-cmeta (npm)
- Nov 8, 2024
Malware in eth-cmeta
1 compromised version
- Nov 8, 2024
Malicious code in com.immutable.orderbook (npm)
1 compromised version
- Nov 8, 2024
Malicious code in eth-cripto (npm)
- Nov 8, 2024
Malware in eth-cripto
1 compromised version
- Nov 8, 2024
Malicious code in ethens-name (npm)
- Nov 8, 2024
Malware in ethens-name
1 compromised version
- Nov 8, 2024
Malicious code in testidneel-cms (npm)
1 compromised version
- Nov 8, 2024
Malicious code in cms-utilities (npm)
3 compromised versions
- Nov 8, 2024
Malware in cms-hpti-components
1 compromised version
- Nov 8, 2024
Malware in testidneel-cms
1 compromised version
- Nov 8, 2024
Malware in cms-utilities
1 compromised version
Page 6060 of 6,646