Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,278 total in npm · sorted newest first- Aug 7, 2024
Malware in egds-tools
1 compromised version
- Aug 7, 2024
Malware in advertising-api-javascript-client
1 compromised version
- Aug 7, 2024
Malware in kaleido-event-tracker
1 compromised version
- Aug 7, 2024
Malware in make-a-payment
1 compromised version
- Aug 7, 2024
Malware in dx-feedback-utils
1 compromised version
- Aug 7, 2024
Malware in affirm-requests
1 compromised version
- Aug 7, 2024
Malware in ember-unified-navbar-360
1 compromised version
- Aug 7, 2024
Malicious code in viewability-framework (npm)
- Aug 7, 2024
Malicious code in react-bs4 (npm)
- Aug 7, 2024
Malicious code in desttestdsfasdf (npm)
- Aug 7, 2024
Malicious code in ampersend-client (npm)
- Aug 7, 2024
Malware in desttestdsfasdf
1 compromised version
- Aug 7, 2024
Malware in viewability-framework
1 compromised version
- Aug 7, 2024
Malware in react-bs4
1 compromised version
- Aug 7, 2024
Malware in ampersend-client
1 compromised version
- Aug 7, 2024
Malicious code in trips-pwa-localization (npm)
- Aug 7, 2024
Malicious code in onboarding-components (npm)
- Aug 7, 2024
Malicious code in incisive_testing_stuffasdasdasd (npm)
- Aug 7, 2024
Malicious code in coralui-support-angular (npm)
- Aug 7, 2024
Malware in trips-pwa-localization
1 compromised version
- Aug 7, 2024
Malware in coralui-support-angular
1 compromised version
- Aug 7, 2024
Malware in incisive_testing_stuffasdasdasd
1 compromised version
- Aug 7, 2024
Malware in onboarding-components
1 compromised version
- Aug 7, 2024
Malicious code in @wiz-common/icons (npm)
- Aug 7, 2024
Malware in @wiz-common/icons
1 compromised version
- Aug 7, 2024
Malicious code in @transcarent/foundation (npm)
- Aug 7, 2024
Malware in @transcarent/foundation
1 compromised version
- Aug 7, 2024
Malicious code in @polycard/claim (npm)
- Aug 7, 2024
Malware in @polycard/claim
1 compromised version
- Aug 7, 2024
Malicious code in @opera-gaming/gaming-web-common (npm)
- Aug 7, 2024
Malware in @opera-gaming/gaming-web-common
1 compromised version
- Aug 7, 2024
Malicious code in @nc-tools/namp-cms-content-provider (npm)
- Aug 7, 2024
Malware in @nc-tools/namp-cms-content-provider
1 compromised version
- Aug 7, 2024
Malicious code in @fs-mco/error-translator (npm)
- Aug 7, 2024
Malware in @fs-mco/error-translator
1 compromised version
- Aug 7, 2024
Malicious code in @egds-tools/types (npm)
- Aug 7, 2024
Malware in @egds-tools/types
1 compromised version
- Aug 7, 2024
Malicious code in @cdc-internal/mkt-nav-footer (npm)
- Aug 7, 2024
Malware in @cdc-internal/mkt-nav-footer
1 compromised version
- Aug 7, 2024
Malicious code in @bybit-fe/bitd (npm)
- Aug 7, 2024
Malware in @bybit-fe/bitd
1 compromised version
- Aug 7, 2024
Malicious code in @awesome-astra/integrations (npm)
- Aug 7, 2024
Malware in @awesome-astra/integrations
1 compromised version
- Aug 7, 2024
Malicious code in @ampol/design-system (npm)
- Aug 7, 2024
Malware in @ampol/design-system
1 compromised version
- Aug 7, 2024
Malicious code in @ads-placements-frontend/claim (npm)
- Aug 7, 2024
Malware in @ads-placements-frontend/claim
1 compromised version
- Aug 7, 2024
Malicious code in yuriosid (npm)
- Aug 7, 2024
Malicious code in woodiorers (npm)
- Aug 7, 2024
Malicious code in uewopdn (npm)
Page 6133 of 6,646