Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,299 total in npm · sorted newest first- Nov 7, 2024
Malicious code in aav6 (npm)
- Nov 7, 2024
Malware in lavora
1 compromised version
- Nov 7, 2024
Malware in myplaintext
1 compromised version
- Nov 7, 2024
Malware in valomemo
1 compromised version
- Nov 7, 2024
Malware in shoot-gk24
1 compromised version
- Nov 7, 2024
Malware in aav6
1 compromised version
- Nov 7, 2024
Malware in valorantengine
1 compromised version
- Nov 7, 2024
Malicious code in eth-namehash (npm)
- Nov 7, 2024
Malware in eth-namehash
1 compromised version
- Nov 7, 2024
Malicious code in web3-toekn (npm)
- Nov 7, 2024
Malware in web3-toekn
1 compromised version
- Nov 7, 2024
Malicious code in eth-errors (npm)
- Nov 7, 2024
Malware in eth-errors
1 compromised version
- Nov 7, 2024
Malicious code in eds-vue (npm)
1 compromised version
- Nov 7, 2024
Malicious code in eth-rperrors (npm)
- Nov 7, 2024
Malware in eth-rperrors
1 compromised version
- Nov 7, 2024
Malicious code in eth-err (npm)
- Nov 7, 2024
Malware in eth-err
1 compromised version
- Nov 7, 2024
Malicious code in web3ibaan (npm)
- Nov 7, 2024
Malware in web3ibaan
1 compromised version
- Nov 7, 2024
Malicious code in webb3-bzz (npm)
- Nov 7, 2024
Malware in webb3-bzz
1 compromised version
- Nov 7, 2024
Malicious code in web-bzz (npm)
- Nov 7, 2024
Malware in web-bzz
1 compromised version
- Nov 7, 2024
Malicious code in wb3cor (npm)
- Nov 7, 2024
Malware in wb3cor
1 compromised version
- Nov 7, 2024
Malicious code in web3tokn (npm)
- Nov 7, 2024
Malware in web3tokn
1 compromised version
- Nov 7, 2024
Malicious code in ethers-multicaal (npm)
- Nov 7, 2024
Malware in ethers-multicaal
1 compromised version
- Nov 7, 2024
Malicious code in ethereumjsutility (npm)
- Nov 7, 2024
Malware in ethereumjsutility
1 compromised version
- Nov 7, 2024
Malicious code in eds-charts (npm)
1 compromised version
- Nov 7, 2024
Malicious code in ethrereum-js-tx (npm)
- Nov 7, 2024
Malware in ethrereum-js-tx
1 compromised version
- Nov 7, 2024
Malicious code in soliddty-coverage (npm)
- Nov 7, 2024
Malware in soliddty-coverage
1 compromised version
- Nov 7, 2024
Malicious code in ozeppelinsolidty (npm)
- Nov 7, 2024
Malware in ozeppelinsolidty
1 compromised version
- Nov 7, 2024
Malicious code in openzeppelinsolidty (npm)
- Nov 7, 2024
Malware in openzeppelinsolidty
1 compromised version
- Nov 7, 2024
Malicious code in openzepplin-solidity (npm)
- Nov 7, 2024
Malware in openzepplin-solidity
1 compromised version
- Nov 7, 2024
Malicious code in easy-transify (npm)
1 compromised version
- Nov 6, 2024
Malicious code in language-matlab (npm)
1 compromised version
- Nov 6, 2024
Malicious code in matitanium (npm)
2 compromised versions
- Nov 6, 2024
Malicious code in comcast.github.io (npm)
5 compromised versions
- Nov 6, 2024
Malicious code in tcms-malicious-package-test-1 (npm)
2 compromised versions
- Nov 6, 2024
Malicious code in dre-example (npm)
1 compromised version
- Nov 6, 2024
Malicious code in cs-deploy-helper (npm)
1 compromised version
Page 6062 of 6,646