Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,288 total in npm · sorted newest first- Oct 16, 2024
Malicious code in comparable-scarlet-perch (npm)
1 compromised version
- Oct 16, 2024
Malicious code in com.microsoft.mrtk.graphicstools.unity (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in coinbase-smart-wallet-documentation (npm)
1 compromised version
- Oct 16, 2024
Malicious code in code-file-loader (npm)
1 compromised version
- Oct 16, 2024
Malicious code in clumsy-olive-goldfish (npm)
1 compromised version
- Oct 16, 2024
Malicious code in closed-salmon-harrier (npm)
1 compromised version
- Oct 16, 2024
Malicious code in cliwoerr (npm)
1 compromised version
- Oct 16, 2024
Malicious code in client-sns (npm)
1 compromised version
- Oct 16, 2024
Malicious code in client-sfn (npm)
1 compromised version
- Oct 16, 2024
Malicious code in client-ses (npm)
1 compromised version
- Oct 16, 2024
Malicious code in client-s3 (npm)
3 compromised versions
- Oct 16, 2024
Malicious code in client-lambda (npm)
1 compromised version
- Oct 16, 2024
Malicious code in client-iam (npm)
1 compromised version
- Oct 16, 2024
Malicious code in client-eventbridge (npm)
1 compromised version
- Oct 16, 2024
Malicious code in client-dynamodb (npm)
1 compromised version
- Oct 16, 2024
Malicious code in client-cognito-identity-provider (npm)
1 compromised version
- Oct 16, 2024
Malicious code in client-cloudwatch-logs (npm)
1 compromised version
- Oct 16, 2024
Malicious code in cli-linux-x64 (npm)
1 compromised version
- Oct 16, 2024
Malicious code in cli-doctor (npm)
1 compromised version
- Oct 16, 2024
Malicious code in cli-ctor (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in claticles (npm)
1 compromised version
- Oct 16, 2024
Malicious code in ckeditor5-table (npm)
1 compromised version
- Oct 16, 2024
Malicious code in ckeditor5-cloud-services (npm)
1 compromised version
- Oct 16, 2024
Malicious code in ckeditor5-block-quote (npm)
1 compromised version
- Oct 16, 2024
Malicious code in ckeditor5-alignment (npm)
1 compromised version
- Oct 16, 2024
Malicious code in ciomiojui (npm)
1 compromised version
- Oct 16, 2024
Malicious code in chunked-blob-reader-native (npm)
1 compromised version
- Oct 16, 2024
Malicious code in cheerful-emerald-pig (npm)
1 compromised version
- Oct 16, 2024
Malicious code in censhare-web (npm)
1 compromised version
- Oct 16, 2024
Malicious code in careful-scarlet-cattle (npm)
1 compromised version
- Oct 16, 2024
Malicious code in bundled-angular-compiler (npm)
1 compromised version
- Oct 16, 2024
Malicious code in builder-vite (npm)
1 compromised version
- Oct 16, 2024
Malicious code in builder-manager (npm)
1 compromised version
- Oct 16, 2024
Malicious code in bsuwoeuo (npm)
1 compromised version
- Oct 16, 2024
Malicious code in bsowuier (npm)
1 compromised version
- Oct 16, 2024
Malicious code in bsjueior (npm)
1 compromised version
- Oct 16, 2024
Malicious code in bruteforcesettings (npm)
1 compromised version
- Oct 16, 2024
Malicious code in boring-amethyst-sheep (npm)
1 compromised version
- Oct 16, 2024
Malicious code in boolean-point-in-polygon (npm)
1 compromised version
- Oct 16, 2024
Malicious code in bnppf-font-icons (npm)
16 compromised versions
- Oct 16, 2024
Malicious code in bkdevportal (npm)
1 compromised version
- Oct 16, 2024
Malicious code in biwjhsue (npm)
1 compromised version
- Oct 16, 2024
Malicious code in biutyiops (npm)
1 compromised version
- Oct 16, 2024
Malicious code in binding-rose-ox (npm)
1 compromised version
- Oct 16, 2024
Malicious code in big-blush-anglerfish (npm)
1 compromised version
- Oct 16, 2024
Malicious code in awueord (npm)
1 compromised version
- Oct 16, 2024
Malicious code in aws-crypto (npm)
3 compromised versions
- Oct 16, 2024
Malicious code in available-coral-possum (npm)
1 compromised version
- Oct 16, 2024
Malicious code in autogen_studio (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in auto-instrumentations-node (npm)
1 compromised version
Page 6081 of 6,646