Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,288 total in npm · sorted newest first- GHSA-px9c-7639-9xx3Malwarenpmdowload_ebok_everything_in_between_a_rocker_romance_by_melissa_toppen_fp7geSep 3, 2024
Malware in dowload_ebok_everything_in_between_a_rocker_romance_by_melissa_toppen_fp7ge
1 compromised version
- GHSA-cfhw-hr7m-3xgcMalwarenpmdowload_ebok_il_codice_wildix_la_vera_storia_del_centralino_b_by_emiliano_tomasoni_laura_piaz_p70e8Sep 3, 2024
Malware in dowload_ebok_il_codice_wildix_la_vera_storia_del_centralino_b_by_emiliano_tomasoni_laura_piaz_p70e8
1 compromised version
- Sep 3, 2024
Malware in dowload_ebok_todas_as_sextas_by_paola_carosella_uz4x6
1 compromised version
- MAL-2024-8718Malwarenpmdowload_ebok_women_who_run_with_the_wolves_by_clarissa_pinkola_estes_phd_p7pgiSep 3, 2024
Malicious code in dowload_ebok_women_who_run_with_the_wolves_by_clarissa_pinkola_estes_phd_p7pgi (npm)
- Sep 3, 2024
Malicious code in dowload_ebok_the_secret_by_rhonda_byrne_qnyoi (npm)
- Sep 3, 2024
Malicious code in dowload_ebok_maria_theresia_by_elisabeth_badinter_w1uoa (npm)
- Sep 3, 2024
Malicious code in dowload_ebok_lenin_y_el_totalitarismo_by_mauricio_rojas_szvld (npm)
- Sep 3, 2024
Malware in dowload_ebok_the_secret_by_rhonda_byrne_qnyoi
1 compromised version
- Sep 3, 2024
Malware in dowload_ebok_maria_theresia_by_elisabeth_badinter_w1uoa
1 compromised version
- GHSA-6mj3-rj8q-99j2Malwarenpmdowload_ebok_women_who_run_with_the_wolves_by_clarissa_pinkola_estes_phd_p7pgiSep 3, 2024
Malware in dowload_ebok_women_who_run_with_the_wolves_by_clarissa_pinkola_estes_phd_p7pgi
1 compromised version
- Sep 3, 2024
Malware in dowload_ebok_lenin_y_el_totalitarismo_by_mauricio_rojas_szvld
1 compromised version
- Sep 3, 2024
Malicious code in assistance-finder-ui (npm)
3 compromised versions
- Sep 3, 2024
Malware in assistance-finder-ui
1 compromised version
- Sep 3, 2024
Malicious code in wekan (npm)
1 compromised version
- Sep 3, 2024
Malicious code in muthuthehacker (npm)
1 compromised version
- Sep 3, 2024
Malicious code in muthuhackermc (npm)
- Sep 3, 2024
Malicious code in muthuhacker (npm)
1 compromised version
- Sep 3, 2024
Malicious code in muthu (npm)
1 compromised version
- Sep 3, 2024
Malware in muthuhackermc
1 compromised version
- Sep 3, 2024
Malware in muthuthehacker
1 compromised version
- Sep 3, 2024
Malware in wekan
1 compromised version
- Sep 3, 2024
Malware in muthu
1 compromised version
- Sep 3, 2024
Malware in muthuhacker
1 compromised version
- Sep 2, 2024
Malicious code in @diotoborg/voluptatum-repellendus-architecto (npm)
- Sep 2, 2024
Malicious code in @diotoborg/voluptas-nulla (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sit-voluptas (npm)
- Sep 2, 2024
Malicious code in @diotoborg/similique-fugit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/repellendus-autem-itaque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/qui-velit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quae-vel (npm)
- Sep 2, 2024
Malicious code in @diotoborg/provident-tempore-nostrum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/optio-maiores (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nisi-velit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nemo-reprehenderit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/modi-necessitatibus-sed (npm)
- Sep 2, 2024
Malicious code in @diotoborg/labore-inventore-exercitationem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ipsum-eaque-quidem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/inventore-culpa-delectus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/incidunt-quo-neque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eum-unde-sint (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ea-sint (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolore-magnam-ipsam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/culpa-reiciendis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/autem-vero (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aut-provident-cumque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/assumenda-praesentium (npm)
- Sep 2, 2024
Malicious code in @diotoborg/asperiores-hic (npm)
- Sep 2, 2024
Malicious code in @diotoborg/adipisci-dolorum (npm)
- Sep 2, 2024
Malware in @diotoborg/similique-fugit
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/asperiores-hic
1 compromised version
Page 6103 of 6,646