Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,288 total in npm · sorted newest first- Oct 16, 2024
Malicious code in ship_sleepnpm-tool (npm)
1 compromised version
- Oct 16, 2024
Malicious code in shenyuan (npm)
1 compromised version
- Oct 16, 2024
Malicious code in aria-web-telemetry (npm)
17 compromised versions
- Oct 16, 2024
Malware in aria-web-telemetry
1 compromised version
- Oct 15, 2024
Malicious code in aspera-ui (npm)
1 compromised version
- Oct 15, 2024
Malicious code in tomorrowland (npm)
1 compromised version
- Oct 15, 2024
Malicious code in @coyo/ui (npm)
2 compromised versions
- Oct 15, 2024
Malicious code in viajemos (npm)
3 compromised versions
- Oct 14, 2024
Malicious code in snowday (npm)
1 compromised version
- Oct 14, 2024
Malicious code in shmam-mw-test-3-test-package-3 (npm)
- Oct 14, 2024
Malware in shmam-mw-test-3-test-package-3
1 compromised version
- Oct 14, 2024
Malicious code in blank-fe (npm)
1 compromised version
- Oct 14, 2024
Malicious code in eslint-plugin-rossum (npm)
1 compromised version
- Oct 14, 2024
Malicious code in redis-oracle (npm)
4 compromised versions
- Oct 14, 2024
Malware in redis-oracle
1 compromised version
- Oct 14, 2024
Malicious code in dmall (npm)
- Oct 14, 2024
Malicious code in discord.jselfbot-v13 (npm)
- Oct 14, 2024
Malicious code in discord.js-dmall (npm)
- Oct 14, 2024
Malware in discord.js-dmall
1 compromised version
- Oct 14, 2024
Malware in dmall
1 compromised version
- Oct 14, 2024
Malware in discord.jselfbot-v13
1 compromised version
- Oct 14, 2024
Malicious code in module-grab (npm)
- Oct 14, 2024
Malware in module-grab
1 compromised version
- Oct 13, 2024
Malicious code in hdhh.hiijack (npm)
1 compromised version
- Oct 13, 2024
Malicious code in splunk-docs (npm)
1 compromised version
- Oct 12, 2024
Malicious code in timeline-airtable (npm)
7 compromised versions
- Oct 12, 2024
Malicious code in mmpp (npm)
2 compromised versions
- Oct 12, 2024
Malicious code in huggingface-vscode (npm)
1 compromised version
- Oct 12, 2024
Malicious code in test-automation-testing (npm)
3 compromised versions
- Oct 12, 2024
Malicious code in native-module2 (npm)
1 compromised version
- Oct 12, 2024
Malicious code in firebase-rc-monitor (npm)
1 compromised version
- Oct 11, 2024
Malicious code in @client-innovation/librct (npm)
1 compromised version
- Oct 11, 2024
Malicious code in rei-browser-shim (npm)
2 compromised versions
- Oct 11, 2024
Malware in papercut-ui
1 compromised version
- Oct 11, 2024
Malicious code in o-typography (npm)
3 compromised versions
- Oct 11, 2024
Malware in o-typography
1 compromised version
- Oct 11, 2024
Malware in evolve-base-assets
1 compromised version
- Oct 11, 2024
Malicious code in ts-jest-starter-kit (npm)
- Oct 11, 2024
Malware in intercom-openapi
1 compromised version
- Oct 11, 2024
Malware in ts-jest-starter-kit
1 compromised version
- Oct 11, 2024
Malware in ember-deep-addon
1 compromised version
- Oct 11, 2024
Malware in worldpay-raft-connect
1 compromised version
- Oct 11, 2024
Malware in ds-home
1 compromised version
- Oct 11, 2024
Malicious code in mallutrojan1002 (npm)
- Oct 11, 2024
Malware in mallutrojan1002
1 compromised version
- Oct 11, 2024
Malware in assistants-nextjs
1 compromised version
- Oct 11, 2024
Malware in neuron-viewer
1 compromised version
- Oct 11, 2024
Malicious code in opti-distube (npm)
3 compromised versions
- Oct 11, 2024
Malware in opti-distube
1 compromised version
- Oct 11, 2024
Malicious code in gcp-monitor-prod (npm)
2 compromised versions
Page 6083 of 6,646