Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,275 total in npm · sorted newest first- Jul 12, 2024
Malicious code in cx-api-client-lite (npm)
2 compromised versions
- Jul 12, 2024
Malicious code in moti-dep-con-test (npm)
4 compromised versions
- Jul 12, 2024
Malicious code in crypto-ops (npm)
- Jul 12, 2024
Malware in crypto-ops
1 compromised version
- Jul 11, 2024
Malicious code in mva10-angular (npm)
1 compromised version
- Jul 11, 2024
Malicious code in two-column-image-text-grid (npm)
1 compromised version
- Jul 11, 2024
Malicious code in dependencyconfusion7 (npm)
1 compromised version
- Jul 11, 2024
Malicious code in @mariott/mi-headless-utils (npm)
1 compromised version
- Jul 11, 2024
Malicious code in noblox-core-ts (npm)
2 compromised versions
- Jul 11, 2024
Malicious code in sap-attribute (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-appid (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-attr (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-cb (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-author (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-border (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-app (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-card (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-categories (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-cardtype (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-ans (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-attachments (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-auth (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-bigger (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-bookmark (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-body (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-boards (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-calendar (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-cats (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-audiobitrates (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-catslist (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-case (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-categoryid (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-caption (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-catorder (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-catname (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-authitem (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-authenticate (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-attributes (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-base64 (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-append (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-badfiles (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-as (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-amt (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-apply (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-captcha (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-aname (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-catid (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-call (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-cd (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-analyze (npm)
1 compromised version
Page 6140 of 6,646