Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,278 total in npm · sorted newest first- Jul 29, 2024
Malware in ent-file-upload-widget
1 compromised version
- Jul 29, 2024
Malware in testaloni-jarneese
1 compromised version
- Jul 29, 2024
Malware in ent-widget-military
1 compromised version
- Jul 29, 2024
Malicious code in income_access_npm_config (npm)
2 compromised versions
- Jul 29, 2024
Malware in income_access_npm_config
1 compromised version
- Jul 29, 2024
Malware in sendapp
1 compromised version
- Jul 29, 2024
Malware in noc-chatbot
1 compromised version
- Jul 29, 2024
Malware in postman-zendesk-support-theme
1 compromised version
- Jul 29, 2024
Malicious code in jayanta_test (npm)
- Jul 29, 2024
Malicious code in cordova-plugin-acuant (npm)
- Jul 29, 2024
Malware in cordova-plugin-acuant
1 compromised version
- Jul 29, 2024
Malware in dagit
1 compromised version
- Jul 29, 2024
Malware in jayanta_test
1 compromised version
- Jul 29, 2024
Malicious code in dagster-docs (npm)
- Jul 29, 2024
Malware in dagster-docs
1 compromised version
- Jul 28, 2024
Malicious code in noc-chatbot (npm)
1 compromised version
- Jul 28, 2024
Malicious code in zapier-elements (npm)
1 compromised version
- Jul 28, 2024
Malicious code in byted-cg (npm)
1 compromised version
- Jul 28, 2024
Malicious code in symphony-familiarity (npm)
3 compromised versions
- Jul 28, 2024
Malicious code in ml-keyframer (npm)
4 compromised versions
- Jul 28, 2024
Malicious code in pkl-vscode (npm)
6 compromised versions
- Jul 28, 2024
Malicious code in byted-ucenter (npm)
1 compromised version
- Jul 27, 2024
Malicious code in nvk-tools (npm)
1 compromised version
- Jul 27, 2024
Malicious code in bb-ui-tools (npm)
2 compromised versions
- Jul 27, 2024
Malicious code in ent-widget-ssn (npm)
1 compromised version
- Jul 27, 2024
Malicious code in usaa-modal (npm)
1 compromised version
- Jul 27, 2024
Malicious code in usaa-message-card (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-cas-proxy (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-disclosure-mocks (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-widget-unauth-msr-stop (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-file-upload-widget (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-widget-military (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-widget-occupation (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-widget-gender (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-widget-itin (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-widget-addcap (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-widget-address (npm)
1 compromised version
- Jul 27, 2024
Malicious code in sendapp (npm)
1 compromised version
- Jul 27, 2024
Malicious code in testaloni-jarneese (npm)
1 compromised version
- Jul 25, 2024
Malicious code in @mentoring-services/sdk (npm)
2 compromised versions
- Jul 25, 2024
Malicious code in feedback-html2canvas (npm)
3 compromised versions
- Jul 25, 2024
Malicious code in slo-schema (npm)
4 compromised versions
- Jul 25, 2024
Malicious code in harthat-chain (npm)
2 compromised versions
- Jul 25, 2024
Malicious code in dagit (npm)
1 compromised version
- Jul 25, 2024
Malicious code in webvisitor (npm)
- Jul 25, 2024
Malicious code in webjsflood (npm)
- Jul 25, 2024
Malicious code in overflood (npm)
- Jul 25, 2024
Malicious code in httpsflood (npm)
- Jul 25, 2024
Malicious code in floodtcpudp (npm)
- Jul 25, 2024
Malware in httpsflood
1 compromised version
Page 6137 of 6,646