Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,299 total in npm · sorted newest first- Nov 5, 2024
Malware in pupeteerscreenrecordr
1 compromised version
- Nov 5, 2024
Malicious code in @maps-bc/i18n (npm)
1 compromised version
- Nov 5, 2024
Malicious code in pupeteer-screen-recorder (npm)
- Nov 5, 2024
Malware in pupeteer-screen-recorder
1 compromised version
- Nov 5, 2024
Malicious code in pupeteer-har (npm)
- Nov 5, 2024
Malware in pupeteer-har
1 compromised version
- Nov 5, 2024
Malicious code in pupeteer-recorder (npm)
- Nov 5, 2024
Malware in pupeteer-recorder
1 compromised version
- Nov 5, 2024
Malicious code in pupeteer-page-proxy (npm)
- Nov 5, 2024
Malware in pupeteer-page-proxy
1 compromised version
- Nov 5, 2024
Malicious code in puppeteerextraadblocker (npm)
- Nov 5, 2024
Malware in puppeteerextraadblocker
1 compromised version
- Nov 5, 2024
Malicious code in @maps-bc/runtime (npm)
1 compromised version
- Nov 5, 2024
Malicious code in puppeteercluser (npm)
- Nov 5, 2024
Malware in puppeteercluser
1 compromised version
- Nov 5, 2024
Malicious code in puppeteer-harr (npm)
- Nov 5, 2024
Malware in puppeteer-harr
1 compromised version
- Nov 5, 2024
Malicious code in pupeteer-cluster (npm)
- Nov 5, 2024
Malware in pupeteer-cluster
1 compromised version
- Nov 5, 2024
Malicious code in puppeteer-extra-plugin-adblokcer (npm)
- Nov 5, 2024
Malware in puppeteer-extra-plugin-adblokcer
1 compromised version
- Nov 5, 2024
Malicious code in pupetier (npm)
- Nov 5, 2024
Malware in pupetier
1 compromised version
- Nov 5, 2024
Malicious code in pupeter (npm)
- Nov 5, 2024
Malware in pupeter
1 compromised version
- Nov 5, 2024
Malicious code in zalf22ausi8 (npm)
- Nov 5, 2024
Malware in zalf22ausi8
1 compromised version
- Nov 5, 2024
Malicious code in daun124wdsa8 (npm)
- Nov 5, 2024
Malware in daun124wdsa8
1 compromised version
- Nov 5, 2024
Malicious code in zalfausi8 (npm)
- Nov 5, 2024
Malware in zalfausi8
1 compromised version
- Nov 5, 2024
Malicious code in @common-pattern/components (npm)
1 compromised version
- Nov 5, 2024
Malicious code in chameleon-sdk-android (npm)
1 compromised version
- Nov 5, 2024
Malicious code in cml-tt-sets (npm)
1 compromised version
- Nov 5, 2024
Malicious code in semi-d2c (npm)
1 compromised version
- Nov 5, 2024
Malicious code in cml-cloudbase (npm)
1 compromised version
- Nov 5, 2024
Malicious code in semi-design (npm)
1 compromised version
- Nov 5, 2024
Malicious code in @douinfe/semi-ui (npm)
1 compromised version
- Nov 4, 2024
Malicious code in nuclei-action (npm)
2 compromised versions
- Nov 4, 2024
Malicious code in nodepaysafesdk (npm)
4 compromised versions
- Nov 4, 2024
Malicious code in mixpanelexpo (npm)
1 compromised version
- Nov 4, 2024
Malicious code in puppeteer-captre (npm)
- Nov 4, 2024
Malware in puppeteer-captre
1 compromised version
- Nov 4, 2024
Malicious code in puppeteer-html2pd (npm)
- Nov 4, 2024
Malware in puppeteer-html2pd
1 compromised version
- Nov 4, 2024
Malicious code in puppeteer-firfox (npm)
- Nov 4, 2024
Malware in puppeteer-firfox
1 compromised version
- Nov 4, 2024
Malicious code in puppeteercaptur (npm)
- Nov 4, 2024
Malware in puppeteercaptur
1 compromised version
- Nov 4, 2024
Malicious code in puppeteer-autoscroll (npm)
Page 6064 of 6,646