Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,278 total in npm · sorted newest first- Aug 29, 2024
Malicious code in milo-core-types (npm)
2 compromised versions
- Aug 29, 2024
Malware in milo-core-types
1 compromised version
- Aug 29, 2024
Malware in mp-template
1 compromised version
- Aug 29, 2024
Malware in milowebsdk
1 compromised version
- Aug 29, 2024
Malware in milominisdk
1 compromised version
- Aug 29, 2024
Malware in xhjxhjmilo
1 compromised version
- Aug 29, 2024
Malware in open-wuji-lib
1 compromised version
- Aug 29, 2024
Malware in milo_next
1 compromised version
- Aug 29, 2024
Malware in milosdk
1 compromised version
- Aug 29, 2024
Malicious code in yyb-monitor-web-sdk (npm)
3 compromised versions
- Aug 29, 2024
Malicious code in tpro_pc_yyb_open_platform (npm)
3 compromised versions
- Aug 29, 2024
Malicious code in dwt-reporter (npm)
2 compromised versions
- Aug 29, 2024
Malicious code in commitlint-preset-halo (npm)
2 compromised versions
- Aug 29, 2024
Malware in yyb-monitor-web-sdk
1 compromised version
- Aug 29, 2024
Malware in tpro_pc_yyb_open_platform
1 compromised version
- Aug 29, 2024
Malware in dwt-reporter
1 compromised version
- Aug 29, 2024
Malware in commitlint-preset-halo
1 compromised version
- Aug 29, 2024
Malicious code in paypal-messages-android (npm)
1 compromised version
- Aug 29, 2024
Malware in paypal-messages-android
1 compromised version
- Aug 29, 2024
Malicious code in idsk (npm)
1 compromised version
- Aug 29, 2024
Malware in idsk
1 compromised version
- Aug 29, 2024
Malware in link_pinterest
1 compromised version
- Aug 29, 2024
Malware in persona-tool
1 compromised version
- Aug 29, 2024
Malicious code in subspace-chatbot-cli (npm)
- Aug 29, 2024
Malware in subspace-chatbot-cli
1 compromised version
- Aug 29, 2024
Malicious code in noblox.js-threads (npm)
1 compromised version
- Aug 29, 2024
Malicious code in noblox.js-thread (npm)
2 compromised versions
- Aug 29, 2024
Malicious code in noblox.js-async (npm)
1 compromised version
- Aug 29, 2024
Malicious code in noblox.js-api (npm)
1 compromised version
- Aug 29, 2024
Malware in noblox.js-thread
1 compromised version
- Aug 29, 2024
Malware in noblox.js-async
1 compromised version
- Aug 29, 2024
Malware in noblox.js-threads
1 compromised version
- Aug 29, 2024
Malware in noblox.js-api
1 compromised version
- MAL-2024-8090Malwarenpmsweet-ruin-immortals-after-dark-16-by-kresley-cole-on-audiobook-full-volumes-Aug 29, 2024
Malicious code in sweet-ruin-immortals-after-dark-16-by-kresley-cole-on-audiobook-full-volumes- (npm)
- GHSA-f3hx-qj9q-x6cvMalwarenpmsweet-ruin-immortals-after-dark-16-by-kresley-cole-on-audiobook-full-volumes-Aug 29, 2024
Malware in sweet-ruin-immortals-after-dark-16-by-kresley-cole-on-audiobook-full-volumes-
1 compromised version
- Aug 29, 2024
Malicious code in finam-p2p-nvsniohj8 (npm)
- Aug 29, 2024
Malware in finam-p2p-nvsniohj8
1 compromised version
- Aug 29, 2024
Malicious code in kak-kupit-aktsii-gazprom-neft-fizicheskomu-litsu-2me4khvx8 (npm)
- Aug 29, 2024
Malware in kak-kupit-aktsii-gazprom-neft-fizicheskomu-litsu-2me4khvx8
1 compromised version
- Aug 29, 2024
Malicious code in as-ui-common (npm)
1 compromised version
- Aug 29, 2024
Malicious code in as-rest-api-v6 (npm)
1 compromised version
- Aug 29, 2024
Malicious code in as-rest-api (npm)
1 compromised version
- Aug 29, 2024
Malware in as-rest-api
1 compromised version
- Aug 29, 2024
Malware in as-ui-common
1 compromised version
- Aug 29, 2024
Malware in as-rest-api-v6
1 compromised version
- Aug 28, 2024
Malicious code in who_mobile (npm)
- Aug 28, 2024
Malicious code in react-rps-boilerplate (npm)
- Aug 28, 2024
Malicious code in bit-node-tools (npm)
- Aug 28, 2024
Malware in react-rps-boilerplate
1 compromised version
- Aug 28, 2024
Malware in bit-node-tools
1 compromised version
Page 6128 of 6,646