Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,278 total in npm · sorted newest first- Aug 6, 2024
Malicious code in @bingads-webui-react/with-site-map (npm)
- Aug 6, 2024
Malicious code in @bingads-webui-react/primitive-utilities (npm)
- Aug 6, 2024
Malware in @bingads-webui-react/with-site-map
1 compromised version
- Aug 6, 2024
Malware in @bingads-webui-react/primitive-utilities
1 compromised version
- Aug 5, 2024
Malicious code in lit-3 (npm)
2 compromised versions
- Aug 5, 2024
Malicious code in broadcast-podlet (npm)
1 compromised version
- Aug 5, 2024
Malicious code in nvmfix (npm)
1 compromised version
- Aug 5, 2024
Malicious code in httpsearch (npm)
2 compromised versions
- Aug 5, 2024
Malicious code in dea-hallow (npm)
- Aug 5, 2024
Malware in dea-hallow
1 compromised version
- Aug 5, 2024
Malicious code in prmnmd-tuls (npm)
- Aug 5, 2024
Malicious code in permenmd-wifi (npm)
- Aug 5, 2024
Malicious code in permenmd-vps (npm)
- Aug 5, 2024
Malicious code in permenmd-track (npm)
- Aug 5, 2024
Malicious code in permenmd-flood (npm)
- Aug 5, 2024
Malware in permenmd-track
1 compromised version
- Aug 5, 2024
Malware in prmnmd-tuls
1 compromised version
- Aug 5, 2024
Malware in permenmd-wifi
1 compromised version
- Aug 5, 2024
Malware in permenmd-vps
1 compromised version
- Aug 5, 2024
Malware in permenmd-flood
1 compromised version
- Aug 1, 2024
Malicious code in md-progress-circular (npm)
6 compromised versions
- Aug 1, 2024
Malicious code in @adidas-data-mesh/common-aws (npm)
2 compromised versions
- Aug 1, 2024
Malicious code in safebs58.js (npm)
1 compromised version
- Aug 1, 2024
Malicious code in nodebs58 (npm)
2 compromised versions
- Aug 1, 2024
Malicious code in ndoe-fethc (npm)
1 compromised version
- Aug 1, 2024
Malicious code in layout-utils.js (npm)
1 compromised version
- Aug 1, 2024
Malicious code in kekepaketti-og (npm)
1 compromised version
- Aug 1, 2024
Malicious code in trigiated (npm)
- Aug 1, 2024
Malicious code in taiwinders (npm)
- Aug 1, 2024
Malicious code in strictructor (npm)
- Aug 1, 2024
Malicious code in modernliner (npm)
- Aug 1, 2024
Malicious code in diosaziose (npm)
- Aug 1, 2024
Malicious code in cdntodister (npm)
- Aug 1, 2024
Malicious code in boostrapsio (npm)
- Aug 1, 2024
Malicious code in basementio (npm)
- Aug 1, 2024
Malware in boostrapsio
1 compromised version
- Aug 1, 2024
Malware in taiwinders
1 compromised version
- Aug 1, 2024
Malware in trigiated
1 compromised version
- Aug 1, 2024
Malware in modernliner
1 compromised version
- Aug 1, 2024
Malware in strictructor
1 compromised version
- Aug 1, 2024
Malware in basementio
1 compromised version
- Aug 1, 2024
Malware in diosaziose
1 compromised version
- Aug 1, 2024
Malware in cdntodister
1 compromised version
- Aug 1, 2024
Malicious code in persona-tool (npm)
1 compromised version
- Jul 31, 2024
Malicious code in kekepaketti-git (npm)
1 compromised version
- Jul 31, 2024
Malicious code in distube-fast (npm)
1 compromised version
- Jul 31, 2024
Malicious code in miapimanager-fe (npm)
2 compromised versions
- Jul 31, 2024
Malicious code in @illimity/hello-world-cryptonetlabs (npm)
- Jul 31, 2024
Malicious code in @illimity/components (npm)
- Jul 31, 2024
Malicious code in @illimity/commons (npm)
Page 6135 of 6,646