Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,299 total in npm · sorted newest first- Nov 8, 2024
Malware in cms-core-redux
1 compromised version
- Nov 8, 2024
Malware in cms-ti-components
1 compromised version
- Nov 7, 2024
Malicious code in com.immutable.api.zkevm (npm)
1 compromised version
- Nov 7, 2024
Malicious code in immutable-axelar-bridge (npm)
1 compromised version
- Nov 7, 2024
Malware in allocations-ui
1 compromised version
- Nov 7, 2024
Malicious code in 1234wdzwkcsf (npm)
1 compromised version
- Nov 7, 2024
Malware in 1234wdzwkcsf
1 compromised version
- Nov 7, 2024
Malicious code in uuid-utils (npm)
1 compromised version
- Nov 7, 2024
Malicious code in verifypoc (npm)
1 compromised version
- Nov 7, 2024
Malicious code in pupeteer-cli (npm)
- Nov 7, 2024
Malware in pupeteer-cli
1 compromised version
- Nov 7, 2024
Malicious code in pupeteer-firefox (npm)
- Nov 7, 2024
Malware in pupeteer-firefox
1 compromised version
- Nov 7, 2024
Malicious code in pupeteer-autoscroll-down (npm)
- Nov 7, 2024
Malware in pupeteer-autoscroll-down
1 compromised version
- Nov 7, 2024
Malicious code in pupeteer-capture (npm)
- Nov 7, 2024
Malware in pupeteer-capture
1 compromised version
- Nov 7, 2024
Malicious code in puppeteerfox (npm)
- Nov 7, 2024
Malware in puppeteerfox
1 compromised version
- Nov 7, 2024
Malicious code in jupyterhub-admin-react (npm)
1 compromised version
- Nov 7, 2024
Malicious code in puppeteerscroll-down (npm)
- Nov 7, 2024
Malware in puppeteerscroll-down
1 compromised version
- Nov 7, 2024
Malicious code in puppeterfirefox (npm)
- Nov 7, 2024
Malware in puppeterfirefox
1 compromised version
- Nov 7, 2024
Malicious code in xgplay (npm)
1 compromised version
- Nov 7, 2024
Malicious code in daumu (npm)
1 compromised version
- Nov 7, 2024
Malicious code in xgplayre (npm)
1 compromised version
- Nov 7, 2024
Malicious code in @bytedanc-ad/mui-vue3 (npm)
1 compromised version
- Nov 7, 2024
Malicious code in @bytedanc-ad/mui-vue2 (npm)
1 compromised version
- Nov 7, 2024
Malicious code in @bytedanc-ad/mui-wc (npm)
1 compromised version
- Nov 7, 2024
Malicious code in @bytedanc-ad/mui-react (npm)
1 compromised version
- Nov 7, 2024
Malicious code in eslint-config-games (npm)
1 compromised version
- Nov 7, 2024
Malicious code in eslint-config-finance-rn (npm)
1 compromised version
- Nov 7, 2024
Malicious code in client-req-scopes (npm)
- Nov 7, 2024
Malicious code in client-req-bans (npm)
1 compromised version
- Nov 7, 2024
Malware in client-req-bans
1 compromised version
- Nov 7, 2024
Malware in client-req-scopes
1 compromised version
- Nov 7, 2024
Malicious code in eslint-config-finance-node (npm)
1 compromised version
- Nov 7, 2024
Malicious code in gimahas-val-test (npm)
- Nov 7, 2024
Malicious code in ansem-wasm (npm)
2 compromised versions
- Nov 7, 2024
Malware in gimahas-val-test
1 compromised version
- Nov 7, 2024
Malware in ansem-wasm
1 compromised version
- Nov 7, 2024
Malicious code in eslint-config-finance (npm)
1 compromised version
- Nov 7, 2024
Malicious code in chalk-node (npm)
- Nov 7, 2024
Malware in chalk-node
1 compromised version
- Nov 7, 2024
Malicious code in valorantengine (npm)
- Nov 7, 2024
Malicious code in valomemo (npm)
- Nov 7, 2024
Malicious code in shoot-gk24 (npm)
- Nov 7, 2024
Malicious code in myplaintext (npm)
- Nov 7, 2024
Malicious code in lavora (npm)
Page 6061 of 6,646