Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,275 total in npm · sorted newest first- Jul 17, 2024
Malicious code in mock_simple_module_relative (npm)
2 compromised versions
- Jul 17, 2024
Malware in mock_simple_module
1 compromised version
- Jul 17, 2024
Malware in mock_simple_module_relative
1 compromised version
- Jul 16, 2024
Malicious code in mock_simple_module (npm)
1 compromised version
- Jul 16, 2024
Malicious code in globalstyling (npm)
1 compromised version
- Jul 16, 2024
Malicious code in pleasedontcall (npm)
1 compromised version
- Jul 16, 2024
Malicious code in toolbox-controller (npm)
1 compromised version
- Jul 16, 2024
Malicious code in evil-hitcon-2024 (npm)
- Jul 16, 2024
Malware in evil-hitcon-2024
1 compromised version
- Jul 16, 2024
Malicious code in selfbot.js-v14 (npm)
- Jul 16, 2024
Malicious code in mizuki7777 (npm)
- Jul 16, 2024
Malware in mizuki7777
1 compromised version
- Jul 16, 2024
Malware in selfbot.js-v14
1 compromised version
- Jul 16, 2024
Malicious code in zonduutest (npm)
6 compromised versions
- Jul 15, 2024
Malicious code in inline-icons (npm)
4 compromised versions
- Jul 15, 2024
Malicious code in icca-core-lib (npm)
1 compromised version
- Jul 15, 2024
Malicious code in health-and-wellness-collab-macro-deploy (npm)
1 compromised version
- Jul 15, 2024
Malicious code in img-aws-s3-object-multipart-copy (npm)
- Jul 15, 2024
Malware in img-aws-s3-object-multipart-copy
1 compromised version
- Jul 15, 2024
Malware in noblox-cores-ts
1 compromised version
- Jul 15, 2024
Malware in discord-api-ts
1 compromised version
- Jul 15, 2024
Malicious code in moto-test-int (npm)
- Jul 15, 2024
Malicious code in moti-another-test2 (npm)
- Jul 15, 2024
Malicious code in moti-another-test1 (npm)
- Jul 15, 2024
Malware in moti-dep-con-test
1 compromised version
- Jul 15, 2024
Malware in moti-another-test2
1 compromised version
- Jul 15, 2024
Malware in moto-test-int
1 compromised version
- Jul 15, 2024
Malware in moti-another-test1
1 compromised version
- Jul 15, 2024
Malicious code in transitive-vulnerability-demo (npm)
- Jul 15, 2024
Malicious code in jfrog-ci-templates (npm)
- Jul 15, 2024
Malware in transitive-vulnerability-demo
1 compromised version
- Jul 15, 2024
Malware in jfrog-ci-templates
1 compromised version
- Jul 15, 2024
Malicious code in jfrog-jfconfig-grpc (npm)
- Jul 15, 2024
Malware in jfrog-jfconfig-grpc
1 compromised version
- Jul 14, 2024
Malicious code in jquery-ui-dialog (npm)
1 compromised version
- Jul 14, 2024
Malicious code in pewspwnrepo4 (npm)
1 compromised version
- Jul 14, 2024
Malicious code in pewspwnrepo2 (npm)
1 compromised version
- Jul 13, 2024
Malicious code in alemmi (npm)
5 compromised versions
- Jul 13, 2024
Malicious code in d3-pprof (npm)
1 compromised version
- Jul 13, 2024
Malicious code in lykooss_poc (npm)
1 compromised version
- Jul 13, 2024
Malicious code in lykoss_poc (npm)
1 compromised version
- Jul 12, 2024
Malicious code in test_lykos (npm)
2 compromised versions
- Jul 12, 2024
Malicious code in mmp-test-utils (npm)
1 compromised version
- Jul 12, 2024
Malicious code in browserlist-config-usaa (npm)
1 compromised version
- Jul 12, 2024
Malicious code in discord-api-ts (npm)
1 compromised version
- Jul 12, 2024
Malicious code in noblox-cores-ts (npm)
1 compromised version
- Jul 12, 2024
Malicious code in atlassian-plugins-jquery (npm)
1 compromised version
- Jul 12, 2024
Malicious code in etp-config-store (npm)
2 compromised versions
- Jul 12, 2024
Malicious code in cx-web-themes (npm)
1 compromised version
- Jul 12, 2024
Malicious code in react-native-latest (npm)
2 compromised versions
Page 6139 of 6,646