Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,288 total in npm · sorted newest first- Sep 28, 2024
Malicious code in dijit-legacy-requires (npm)
1 compromised version
- Sep 27, 2024
Malicious code in apollo-client-error-template (npm)
1 compromised version
- Sep 27, 2024
Malicious code in inclusive-ai-dao-website (npm)
3 compromised versions
- Sep 27, 2024
Malicious code in papercut-ui (npm)
1 compromised version
- Sep 27, 2024
Malicious code in meraki-react-router (npm)
2 compromised versions
- Sep 27, 2024
Malicious code in lean-coffee (npm)
1 compromised version
- Sep 27, 2024
Malicious code in worldpay-raft-connect (npm)
1 compromised version
- Sep 27, 2024
Malicious code in whatnot_seller_api_docs (npm)
7 compromised versions
- Sep 27, 2024
Malicious code in @helvetia-italia/ng-selly-lib-operator-dashboard (npm)
1 compromised version
- Sep 27, 2024
Malicious code in neuron-viewer (npm)
3 compromised versions
- Sep 27, 2024
Malicious code in node-jaws (npm)
1 compromised version
- Sep 27, 2024
Malicious code in @mallutrojan005/coveralls (npm)
1 compromised version
- Sep 27, 2024
Malicious code in @helvetia-italia/ng-selly-components (npm)
4 compromised versions
- Sep 27, 2024
Malicious code in assistants-nextjs (npm)
3 compromised versions
- Sep 27, 2024
Malicious code in o-forms (npm)
1 compromised version
- Sep 27, 2024
Malicious code in font-lato-2-subset (npm)
1 compromised version
- Sep 27, 2024
Malicious code in testdjallal-ui-common (npm)
1 compromised version
- Sep 27, 2024
Malware in seconddjallal-ui-common
1 compromised version
- Sep 27, 2024
Malware in testdjallal-ui-common
1 compromised version
- Sep 27, 2024
Malicious code in dexopener (npm)
1 compromised version
- Sep 27, 2024
Malware in dexopener
1 compromised version
- Sep 27, 2024
Malicious code in them4on (npm)
- Sep 27, 2024
Malicious code in lodasher (npm)
- Sep 27, 2024
Malicious code in laodasher (npm)
- Sep 27, 2024
Malware in laodasher
1 compromised version
- Sep 27, 2024
Malware in lodasher
1 compromised version
- Sep 27, 2024
Malware in them4on
1 compromised version
- Sep 27, 2024
Malicious code in multiple-keys (npm)
- Sep 27, 2024
Malicious code in autocomplete-monorepo (npm)
- Sep 27, 2024
Malware in multiple-keys
1 compromised version
- Sep 27, 2024
Malware in autocomplete-monorepo
1 compromised version
- Sep 27, 2024
Malicious code in djangopeople (npm)
- Sep 27, 2024
Malware in djangopeople
1 compromised version
- Sep 27, 2024
Malware in spiffetest.io
1 compromised version
- Sep 27, 2024
Malware in spiffe.io
1 compromised version
- Sep 27, 2024
Malware in mobilistensampleapp
1 compromised version
- Sep 27, 2024
Malware in djangosnippets
1 compromised version
- Sep 27, 2024
Malicious code in routerpairs (npm)
- Sep 27, 2024
Malicious code in poolpairs (npm)
- Sep 27, 2024
Malware in routerpairs
1 compromised version
- Sep 27, 2024
Malware in poolpairs
1 compromised version
- Sep 26, 2024
Malicious code in fdx-mock-app (npm)
3 compromised versions
- Sep 26, 2024
Malicious code in setup-specmatic (npm)
1 compromised version
- Sep 26, 2024
Malicious code in spiffetest.io (npm)
1 compromised version
- Sep 26, 2024
Malicious code in spiffe.io (npm)
2 compromised versions
- Sep 26, 2024
Malicious code in djangosnippets (npm)
1 compromised version
- Sep 26, 2024
Malicious code in csm-installation-wizard (npm)
3 compromised versions
- Sep 26, 2024
Malicious code in defillama-apy-server (npm)
1 compromised version
- Sep 26, 2024
Malicious code in atomic-swap (npm)
3 compromised versions
- Sep 26, 2024
Malicious code in mobilistensampleapp (npm)
1 compromised version
Page 6093 of 6,646