Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,299 total in npm · sorted newest first- Oct 21, 2024
Malicious code in @ng-cat/common (npm)
1 compromised version
- Oct 21, 2024
Malicious code in unity-components (npm)
1 compromised version
- Oct 21, 2024
Malicious code in unity-xlsx (npm)
1 compromised version
- Oct 21, 2024
Malicious code in mybasicauth (npm)
2 compromised versions
- Oct 21, 2024
Malicious code in google-drive-integration (npm)
1 compromised version
- Oct 21, 2024
Malware in google-drive-integration
1 compromised version
- Oct 19, 2024
Malicious code in @ttspc/open_center_qf_detail (npm)
2 compromised versions
- Oct 19, 2024
Malicious code in capi-param-builder (npm)
1 compromised version
- Oct 19, 2024
Malicious code in eslint-config-bc (npm)
1 compromised version
- Oct 19, 2024
Malicious code in nf-gestures (npm)
1 compromised version
- Oct 18, 2024
Malicious code in atg-superagent-retry-delay (npm)
1 compromised version
- Oct 18, 2024
Malicious code in roblox-creator-docs (npm)
1 compromised version
- Oct 18, 2024
Malicious code in projetmobile (npm)
1 compromised version
- Oct 18, 2024
Malicious code in unity-uikit (npm)
2 compromised versions
- Oct 18, 2024
Malicious code in emburse (npm)
2 compromised versions
- Oct 18, 2024
Malicious code in wagmi-toolkits (npm)
- Oct 18, 2024
Malicious code in wagmi-connectors (npm)
- Oct 18, 2024
Malware in wagmi-toolkits
1 compromised version
- Oct 18, 2024
Malware in wagmi-connectors
1 compromised version
- Oct 18, 2024
Malicious code in jungle-db (npm)
- Oct 18, 2024
Malware in nimiq-validators-score
1 compromised version
- Oct 18, 2024
Malware in kitsunet
1 compromised version
- Oct 18, 2024
Malware in jungle-db
1 compromised version
- Oct 18, 2024
Malware in gerhtregefddfsr
1 compromised version
- Oct 18, 2024
Malware in yogergerherhme
1 compromised version
- Oct 18, 2024
Malware in webpack-i18n-tools
1 compromised version
- Oct 18, 2024
Malware in webpack4types
1 compromised version
- Oct 18, 2024
Malware in gerhtregefdsr
1 compromised version
- Oct 18, 2024
Malware in tapable1types
1 compromised version
- Oct 17, 2024
Malicious code in @ciam-expressjs-vanilla-samples/shared (npm)
1 compromised version
- Oct 17, 2024
Malicious code in relativity-design-system (npm)
1 compromised version
- Oct 17, 2024
Malicious code in ethers-mew (npm)
1 compromised version
- Oct 17, 2024
Malicious code in kitsunet (npm)
1 compromised version
- Oct 17, 2024
Malicious code in webpack4types (npm)
1 compromised version
- Oct 17, 2024
Malicious code in webpack-i18n-tools (npm)
1 compromised version
- Oct 17, 2024
Malicious code in tapable1types (npm)
1 compromised version
- Oct 17, 2024
Malicious code in nimiq-validators-score (npm)
1 compromised version
- Oct 17, 2024
Malicious code in yogergerherhme (npm)
1 compromised version
- Oct 17, 2024
Malicious code in gerhtregefddfsr (npm)
1 compromised version
- Oct 17, 2024
Malicious code in gerhtregefdsr (npm)
1 compromised version
- Oct 17, 2024
Malicious code in @wame/blue-oval-theme (npm)
1 compromised version
- Oct 17, 2024
Malicious code in @safecorp/one-ui (npm)
1 compromised version
- Oct 17, 2024
Malicious code in module-with-prebuild (npm)
1 compromised version
- Oct 17, 2024
Malicious code in direct_access_theme (npm)
1 compromised version
- Oct 17, 2024
Malicious code in toolspacks (npm)
1 compromised version
- Oct 17, 2024
Malicious code in omise-example (npm)
2 compromised versions
- Oct 17, 2024
Malicious code in jifa-frontend (npm)
1 compromised version
- Oct 17, 2024
Malware in omise-example
1 compromised version
- Oct 17, 2024
Malware in jifa-frontend
1 compromised version
- Oct 17, 2024
Malware in timeline-airtable
1 compromised version
Page 6069 of 6,646