Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,278 total in npm · sorted newest first- Jul 25, 2024
Malware in webvisitor
1 compromised version
- Jul 25, 2024
Malware in floodtcpudp
1 compromised version
- Jul 25, 2024
Malware in overflood
1 compromised version
- Jul 25, 2024
Malware in webjsflood
1 compromised version
- Jul 24, 2024
Malicious code in health-check-nodejs (npm)
1 compromised version
- Jul 24, 2024
Malicious code in @vertiv-co/ui-library-nextgen (npm)
1 compromised version
- Jul 24, 2024
Malicious code in @vertiv-co/viewer-service-library (npm)
1 compromised version
- Jul 24, 2024
Malicious code in smart-input-textarea (npm)
- Jul 24, 2024
Malicious code in smart-input-checkbox (npm)
- Jul 24, 2024
Malicious code in lol1234 (npm)
- Jul 24, 2024
Malware in smart-input-checkbox
1 compromised version
- Jul 24, 2024
Malware in smart-input-textarea
1 compromised version
- Jul 24, 2024
Malware in lol1234
1 compromised version
- Jul 23, 2024
Malicious code in infowrap-filepicker (npm)
1 compromised version
- Jul 23, 2024
Malicious code in appds-nodejs-utils (npm)
1 compromised version
- Jul 23, 2024
Malware in roblox-ts-core
1 compromised version
- Jul 22, 2024
Malicious code in next-react-notify (npm)
1 compromised version
- Jul 22, 2024
Malicious code in tyibyc (npm)
2 compromised versions
- Jul 22, 2024
Malicious code in roblox-ts-core (npm)
2 compromised versions
- Jul 22, 2024
Malicious code in jqtools-toolbox-expose (npm)
2 compromised versions
- Jul 22, 2024
Malicious code in chromestatus-openapi (npm)
3 compromised versions
- Jul 22, 2024
Malicious code in sap-accesslevel (npm)
1 compromised version
- Jul 22, 2024
Malicious code in sap-ac (npm)
4 compromised versions
- Jul 22, 2024
Malicious code in sap-abstract (npm)
176 compromised versions
- Jul 22, 2024
Malicious code in sap-about (npm)
3 compromised versions
- Jul 22, 2024
Malicious code in sap-abort (npm)
2 compromised versions
- Jul 22, 2024
Malware in sap-abstract
1 compromised version
- Jul 22, 2024
Malware in sap-abort
1 compromised version
- Jul 22, 2024
Malware in sap-about
1 compromised version
- Jul 22, 2024
Malware in sap-access
1 compromised version
- Jul 22, 2024
Malware in sap-accesslevel
1 compromised version
- Jul 22, 2024
Malware in sap-ac
1 compromised version
- Jul 22, 2024
Malicious code in sap-accept (npm)
5 compromised versions
- Jul 22, 2024
Malware in sap-accept
1 compromised version
- Jul 22, 2024
Malware in toolbox-controller
1 compromised version
- Jul 22, 2024
Malware in zonduutest
1 compromised version
- Jul 21, 2024
Malicious code in google-map-markerclusterer (npm)
1 compromised version
- Jul 21, 2024
Malicious code in angular-material-panel (npm)
1 compromised version
- Jul 21, 2024
Malicious code in fintual-emojifier (npm)
1 compromised version
- Jul 21, 2024
Malicious code in shadycss (npm)
1 compromised version
- Jul 20, 2024
Malicious code in oj-odcs-common (npm)
2 compromised versions
- Jul 20, 2024
Malicious code in @celigo/fuse-ui (npm)
1 compromised version
- Jul 19, 2024
Malicious code in fireauth.args (npm)
2 compromised versions
- Jul 19, 2024
Malicious code in fe-bootstrap (npm)
3 compromised versions
- Jul 19, 2024
Malware in geico_design_kit
1 compromised version
- Jul 19, 2024
Malware in firefly-sdk-ts
1 compromised version
- Jul 18, 2024
Malicious code in marvinjs (npm)
2 compromised versions
- Jul 18, 2024
Malicious code in test-ssssnpm-com-test (npm)
1 compromised version
- Jul 18, 2024
Malicious code in x91yz (npm)
1 compromised version
- Jul 18, 2024
Malicious code in express-jwt-v6 (npm)
1 compromised version
Page 6138 of 6,646