Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,299 total in npm · sorted newest first- Nov 6, 2024
Malicious code in cs-base-component (npm)
1 compromised version
- Nov 6, 2024
Malicious code in solidty-coveage (npm)
- Nov 6, 2024
Malware in solidty-coveage
1 compromised version
- Nov 6, 2024
Malicious code in commitlint-plugin-jira-type-rules (npm)
1 compromised version
- Nov 6, 2024
Malicious code in @umreg/zxcvbn (npm)
1 compromised version
- Nov 6, 2024
Malicious code in soliditycoverag (npm)
- Nov 6, 2024
Malware in soliditycoverag
1 compromised version
- Nov 6, 2024
Malicious code in code-analysis-ts-for-sellercenter (npm)
1 compromised version
- Nov 6, 2024
Malicious code in web3-provdr (npm)
- Nov 6, 2024
Malware in web3-provdr
1 compromised version
- Nov 6, 2024
Malicious code in web-providers (npm)
- Nov 6, 2024
Malware in web-providers
1 compromised version
- Nov 6, 2024
Malicious code in wb-eth3 (npm)
- Nov 6, 2024
Malware in wb-eth3
1 compromised version
- Nov 6, 2024
Malicious code in wb3-eth (npm)
- Nov 6, 2024
Malware in wb3-eth
1 compromised version
- Nov 6, 2024
Malicious code in chat-history-log-viewer (npm)
1 compromised version
- Nov 6, 2024
Malicious code in case-dispute-common (npm)
1 compromised version
- Nov 6, 2024
Malicious code in web-eth (npm)
- Nov 6, 2024
Malware in web-eth
1 compromised version
- Nov 6, 2024
Malicious code in etherscaan-api (npm)
- Nov 6, 2024
Malware in etherscaan-api
1 compromised version
- Nov 6, 2024
Malicious code in ethgass-reporter (npm)
- Nov 6, 2024
Malware in ethgass-reporter
1 compromised version
- Nov 6, 2024
Malicious code in eth-gas-report (npm)
- Nov 6, 2024
Malware in eth-gas-report
1 compromised version
- Nov 6, 2024
Malicious code in gnache-cli (npm)
- Nov 6, 2024
Malware in gnache-cli
1 compromised version
- Nov 6, 2024
Malicious code in ganach-cli (npm)
- Nov 6, 2024
Malware in ganach-cli
1 compromised version
- Nov 6, 2024
Malicious code in babel-plugin-method-version (npm)
1 compromised version
- Nov 6, 2024
Malicious code in trufel (npm)
- Nov 6, 2024
Malware in trufel
1 compromised version
- Nov 6, 2024
Malicious code in puppeteerwweb (npm)
- Nov 6, 2024
Malware in puppeteerwweb
1 compromised version
- Nov 5, 2024
Malicious code in tcms-malicious-package-test (npm)
1 compromised version
- Nov 5, 2024
Malicious code in emtoolsjs (npm)
1 compromised version
- Nov 5, 2024
Malicious code in api-cache-worker (npm)
1 compromised version
- Nov 5, 2024
Malicious code in apc-protobuf (npm)
1 compromised version
- Nov 5, 2024
Malicious code in apc-official-icon (npm)
1 compromised version
- Nov 5, 2024
Malicious code in apa-components (npm)
1 compromised version
- Nov 5, 2024
Malicious code in osm-legal-speed (npm)
1 compromised version
- Nov 5, 2024
Malicious code in team-plain (npm)
1 compromised version
- Nov 5, 2024
Malicious code in @isfe-common/testing-utils (npm)
1 compromised version
- Nov 5, 2024
Malicious code in pupeteerreqintercepter (npm)
- Nov 5, 2024
Malware in pupeteerreqintercepter
1 compromised version
- Nov 5, 2024
Malicious code in puppeteerrequestinterceptor (npm)
- Nov 5, 2024
Malware in puppeteerrequestinterceptor
1 compromised version
- Nov 5, 2024
Malicious code in @isfe-common/testing-constants (npm)
1 compromised version
- Nov 5, 2024
Malicious code in pupeteerscreenrecordr (npm)
Page 6063 of 6,646