Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,288 total in npm · sorted newest first- Oct 10, 2024
Malware in b2b-buyer-portal
1 compromised version
- Oct 10, 2024
Malicious code in multiply-proxy-actions-contracts (npm)
- Oct 10, 2024
Malicious code in blockpi (npm)
- Oct 10, 2024
Malware in defillama-apy-server
1 compromised version
- Oct 10, 2024
Malware in multiply-proxy-actions-contracts
1 compromised version
- Oct 10, 2024
Malware in blockpi
1 compromised version
- Oct 10, 2024
Malicious code in ens-metadata-service (npm)
- Oct 10, 2024
Malware in ens-metadata-service
1 compromised version
- Oct 10, 2024
Malicious code in cli-command-with-alias (npm)
- Oct 10, 2024
Malware in cli-command-with-alias
1 compromised version
- Oct 10, 2024
Malicious code in node-red-contrib-lowwercase (npm)
2 compromised versions
- Oct 10, 2024
Malware in node-red-contrib-lowwercase
1 compromised version
- Oct 10, 2024
Malware in monorepo-releaser
1 compromised version
- Oct 10, 2024
Malware in interactive-app
1 compromised version
- Oct 10, 2024
Malicious code in wassup-shiva (npm)
4 compromised versions
- Oct 10, 2024
Malicious code in helri-shiv (npm)
- Oct 10, 2024
Malware in helri-shiv
1 compromised version
- Oct 10, 2024
Malware in wassup-shiva
1 compromised version
- Oct 9, 2024
Malicious code in shmam-test-npm-test-5 (npm)
- Oct 9, 2024
Malware in shmam-test-npm-test-5
1 compromised version
- Oct 9, 2024
Malicious code in extrafee (npm)
1 compromised version
- Oct 9, 2024
Malicious code in customer-feedback-widget (npm)
1 compromised version
- Oct 9, 2024
Malware in o-typescript
1 compromised version
- Oct 9, 2024
Malware in m-typescript
1 compromised version
- Oct 9, 2024
Malware in no-typescript
1 compromised version
- Oct 9, 2024
Malware in fccui
1 compromised version
- Oct 9, 2024
Malware in reference-implementation
1 compromised version
- Oct 9, 2024
Malware in deferred-initialization
1 compromised version
- Oct 9, 2024
Malware in app-monorepo
1 compromised version
- Oct 9, 2024
Malicious code in blockscan-api (npm)
- Oct 9, 2024
Malware in blockscan-api
1 compromised version
- Oct 9, 2024
Malicious code in yayt09 (npm)
- Oct 9, 2024
Malicious code in y4wcqg (npm)
- Oct 9, 2024
Malicious code in tmjadd (npm)
- Oct 9, 2024
Malicious code in svuv9u (npm)
- Oct 9, 2024
Malicious code in oipmbq (npm)
- Oct 9, 2024
Malicious code in jzcgnt (npm)
- Oct 9, 2024
Malicious code in d40tmf (npm)
- Oct 9, 2024
Malicious code in bcsgb0 (npm)
- Oct 9, 2024
Malicious code in agquu6 (npm)
- Oct 9, 2024
Malicious code in a0npiv (npm)
- Oct 9, 2024
Malicious code in 29ge1l (npm)
- Oct 9, 2024
Malicious code in 1nzcej (npm)
- Oct 9, 2024
Malicious code in 04axvm (npm)
- Oct 9, 2024
Malware in oipmbq
1 compromised version
- Oct 9, 2024
Malware in tmjadd
1 compromised version
- Oct 9, 2024
Malware in yayt09
1 compromised version
- Oct 9, 2024
Malware in a0npiv
1 compromised version
- Oct 9, 2024
Malware in jzcgnt
1 compromised version
- Oct 9, 2024
Malware in y4wcqg
1 compromised version
Page 6086 of 6,646