Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,288 total in npm · sorted newest first- Sep 17, 2024
Malware in ably-sales-demo-frontend
1 compromised version
- Sep 17, 2024
Malicious code in latam-xp-analytics-plugin-bloomreach (npm)
- Sep 17, 2024
Malicious code in eslint-plugin-xp-i18n (npm)
- Sep 17, 2024
Malware in eslint-plugin-xp-i18n
1 compromised version
- Sep 17, 2024
Malware in latam-xp-analytics-plugin-bloomreach
1 compromised version
- Sep 16, 2024
Malicious code in redmond (npm)
2 compromised versions
- Sep 16, 2024
Malicious code in noblox.js-types (npm)
- Sep 16, 2024
Malicious code in noblox.js-middleware (npm)
- Sep 16, 2024
Malicious code in halifax (npm)
2 compromised versions
- Sep 16, 2024
Malicious code in awsspeedtest (npm)
- Sep 16, 2024
Malicious code in afe-host-client (npm)
1 compromised version
- Sep 16, 2024
Malware in noblox.js-types
1 compromised version
- Sep 16, 2024
Malware in noblox.js-middleware
1 compromised version
- Sep 16, 2024
Malware in awsspeedtest
1 compromised version
- Sep 16, 2024
Malware in redmond
1 compromised version
- Sep 16, 2024
Malware in afe-host-client
1 compromised version
- Sep 16, 2024
Malware in afe-base-component
1 compromised version
- Sep 16, 2024
Malware in halifax
1 compromised version
- Sep 16, 2024
Malicious code in testing_coll (npm)
1 compromised version
- Sep 16, 2024
Malicious code in rust-functions (npm)
1 compromised version
- Sep 16, 2024
Malicious code in events_pkg (npm)
1 compromised version
- Sep 11, 2024
Malicious code in quickread (npm)
2 compromised versions
- Sep 11, 2024
Malicious code in quickcolor (npm)
- Sep 11, 2024
Malware in quickcolor
1 compromised version
- Sep 11, 2024
Malware in quickread
1 compromised version
- Sep 11, 2024
Malicious code in passports-js (npm)
- Sep 11, 2024
Malicious code in bcrypts-js (npm)
1 compromised version
- Sep 11, 2024
Malware in passports-js
1 compromised version
- Sep 11, 2024
Malware in bcrypts-js
1 compromised version
- Sep 11, 2024
Malicious code in sketch-crowdin (npm)
- Sep 11, 2024
Malicious code in publish-test-result-screenshot (npm)
- Sep 11, 2024
Malicious code in perf-tools (npm)
- Sep 11, 2024
Malicious code in node-integration-test (npm)
- Sep 11, 2024
Malicious code in leaktopus-frontend (npm)
- Sep 11, 2024
Malicious code in fma-connect-javascript (npm)
- Sep 11, 2024
Malicious code in create-auction-house (npm)
- Sep 11, 2024
Malicious code in conductor-utils (npm)
- Sep 11, 2024
Malware in fma-connect-javascript
1 compromised version
- Sep 11, 2024
Malware in sketch-crowdin
1 compromised version
- Sep 11, 2024
Malware in leaktopus-frontend
1 compromised version
- Sep 11, 2024
Malware in node-integration-test
1 compromised version
- Sep 11, 2024
Malware in perf-tools
1 compromised version
- Sep 11, 2024
Malware in conductor-utils
1 compromised version
- Sep 11, 2024
Malware in create-auction-house
1 compromised version
- Sep 11, 2024
Malware in publish-test-result-screenshot
1 compromised version
- Sep 10, 2024
Malicious code in cryptograph-js (npm)
- Sep 10, 2024
Malicious code in color-print12345 (npm)
- Sep 10, 2024
Malicious code in beautiful-text (npm)
11 compromised versions
- Sep 10, 2024
Malware in color-print12345
1 compromised version
- Sep 10, 2024
Malware in beautiful-text
1 compromised version
Page 6097 of 6,646