Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,288 total in npm · sorted newest first- Oct 9, 2024
Malicious code in updated-script-50-50-pick-a-door-script-rooms-check-vr6en2 (npm)
- Oct 9, 2024
Malicious code in latest-update-my-restaurant-script-h-a-c-k-jd9nxv (npm)
- Oct 9, 2024
Malicious code in get-new-script-roblox-murder-mystery-2-h-a-c-k-script-87l2lf (npm)
- Oct 9, 2024
Malware in updated-script-50-50-pick-a-door-script-rooms-check-vr6en2
1 compromised version
- Oct 9, 2024
Malware in get-new-script-roblox-murder-mystery-2-h-a-c-k-script-87l2lf
1 compromised version
- Oct 9, 2024
Malware in latest-update-my-restaurant-script-h-a-c-k-jd9nxv
1 compromised version
- Oct 9, 2024
Malware in working-today--1-blocks-every-second-script-n9qfzq
1 compromised version
- GHSA-g7pf-gwrp-fv4vMalwarenpmworking-today--soft-aim-fortnite-down-lo-ad-pc-esp-aimbot-undetected-2023-41etdnOct 9, 2024
Malware in working-today--soft-aim-fortnite-down-lo-ad-pc-esp-aimbot-undetected-2023-41etdn
1 compromised version
- Oct 9, 2024
Malware in updated-script-restaurant-tycoon-2-script-instant-cook-4dz6cj
1 compromised version
- Oct 9, 2024
Malicious code in entrevista_devops (npm)
1 compromised version
- Oct 9, 2024
Malicious code in cap-frontend (npm)
1 compromised version
- Oct 9, 2024
Malware in entrevista_devops
1 compromised version
- Oct 9, 2024
Malware in cap-frontend
1 compromised version
- Oct 9, 2024
Malicious code in uploadcare-ckeditor (npm)
1 compromised version
- Oct 9, 2024
Malicious code in sachinkrhackeronetestpackage (npm)
- Oct 9, 2024
Malicious code in replaceable-media-recorder (npm)
- Oct 9, 2024
Malicious code in openai-examples (npm)
1 compromised version
- Oct 9, 2024
Malicious code in d11-conventional-jira-changelog (npm)
1 compromised version
- Oct 9, 2024
Malicious code in branch-design-system (npm)
1 compromised version
- Oct 9, 2024
Malicious code in braintree_express_example (npm)
- Oct 9, 2024
Malicious code in braintree.github.io (npm)
- Oct 9, 2024
Malware in hulululu
1 compromised version
- Oct 9, 2024
Malware in d11-conventional-jira-changelog
1 compromised version
- Oct 9, 2024
Malware in sachinkrhackeronetestpackage
1 compromised version
- Oct 9, 2024
Malware in braintree_express_example
1 compromised version
- Oct 9, 2024
Malware in replaceable-media-recorder
1 compromised version
- Oct 9, 2024
Malware in branch-design-system
1 compromised version
- Oct 9, 2024
Malware in openai-examples
1 compromised version
- Oct 9, 2024
Malware in braintree.github.io
1 compromised version
- Oct 9, 2024
Malware in uploadcare-ckeditor
1 compromised version
- Oct 9, 2024
Malicious code in videojs-sneakpeek (npm)
- Oct 9, 2024
Malicious code in uchiwa (npm)
1 compromised version
- Oct 9, 2024
Malicious code in svelte-hms-world (npm)
1 compromised version
- Oct 9, 2024
Malicious code in sp-api-app-cdk (npm)
- Oct 9, 2024
Malicious code in snyk.io (npm)
- Oct 9, 2024
Malicious code in sdk-integration-tests (npm)
- Oct 9, 2024
Malicious code in sae-viewer (npm)
- Oct 9, 2024
Malicious code in redis-examples (npm)
- Oct 9, 2024
Malicious code in openai-bun-test (npm)
- Oct 9, 2024
Malicious code in nanoslackts-env-test (npm)
- Oct 9, 2024
Malicious code in makebetteremail (npm)
2 compromised versions
- Oct 9, 2024
Malicious code in language-rego (npm)
1 compromised version
- Oct 9, 2024
Malicious code in kubeman (npm)
- Oct 9, 2024
Malicious code in juno-composer (npm)
- Oct 9, 2024
Malicious code in google.fhir.r4.google (npm)
- Oct 9, 2024
Malicious code in buy-sell-opensea-sdk-demo (npm)
- Oct 9, 2024
Malicious code in branch-extension (npm)
- Oct 9, 2024
Malicious code in backend-engineering-test (npm)
- Oct 9, 2024
Malicious code in asp.app (npm)
- Oct 9, 2024
Malicious code in annotation-app (npm)
Page 6089 of 6,646