Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,275 total in npm · sorted newest first- Jul 11, 2024
Malicious code in sap-added (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-additional (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-addfolder (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-addmeta (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-addgroup (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-activation (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-active (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-activkey (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-accountid (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-activate (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-ad (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-activated (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-add (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-adapter (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-activity (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-act (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-action (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-accesstype (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-actionfile (npm)
1 compromised version
- Jul 11, 2024
Malicious code in sap-action2 (npm)
1 compromised version
- Jul 11, 2024
Malicious code in ajex (npm)
- Jul 11, 2024
Malware in ajex
1 compromised version
- Jul 11, 2024
Malicious code in komcay (npm)
- Jul 11, 2024
Malicious code in komcaxx (npm)
2 compromised versions
- Jul 11, 2024
Malicious code in komcax (npm)
- Jul 11, 2024
Malware in komcax
1 compromised version
- Jul 11, 2024
Malware in komcay
1 compromised version
- Jul 11, 2024
Malware in komcaxx
1 compromised version
- Jul 11, 2024
Malicious code in tilda-date-picker (npm)
- Jul 11, 2024
Malicious code in stylecshert (npm)
- Jul 11, 2024
Malicious code in flammerxdjson (npm)
- Jul 11, 2024
Malware in flammerxdjson
1 compromised version
- Jul 11, 2024
Malware in stylecshert
1 compromised version
- Jul 11, 2024
Malware in tilda-date-picker
1 compromised version
- Jul 11, 2024
Malicious code in stylesshert (npm)
- Jul 11, 2024
Malicious code in stylesnox (npm)
- Jul 11, 2024
Malware in stylesnox
1 compromised version
- Jul 11, 2024
Malware in stylesshert
1 compromised version
- Jul 11, 2024
Malicious code in secnav (npm)
1 compromised version
- Jul 11, 2024
Malicious code in xxxtesting (npm)
1 compromised version
- Jul 11, 2024
Malicious code in jqueryxxx (npm)
- Jul 11, 2024
Malicious code in cloudhosting (npm)
- Jul 11, 2024
Malicious code in cloudhost (npm)
1 compromised version
- Jul 11, 2024
Malicious code in bootstrapcloud (npm)
- Jul 11, 2024
Malicious code in bootstar (npm)
- Jul 11, 2024
Malicious code in bootrun (npm)
- Jul 11, 2024
Malware in xxxtesting
1 compromised version
- Jul 11, 2024
Malware in bootstar
1 compromised version
- Jul 11, 2024
Malware in bootstrapcloud
1 compromised version
- Jul 11, 2024
Malware in bootrun
1 compromised version
Page 6144 of 6,646