Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,275 total in npm · sorted newest first- Jul 11, 2024
Malicious code in stylesfoxx (npm)
- Jul 11, 2024
Malicious code in stylescss (npm)
1 compromised version
- Jul 11, 2024
Malware in stylesyosx
1 compromised version
- Jul 11, 2024
Malware in stylescss
1 compromised version
- Jul 11, 2024
Malware in stylesfoxx
1 compromised version
- Jul 11, 2024
Malicious code in style-logo (npm)
- Jul 11, 2024
Malicious code in icnes (npm)
1 compromised version
- Jul 11, 2024
Malware in style-logo
1 compromised version
- Jul 11, 2024
Malware in icnes
1 compromised version
- Jul 10, 2024
Malicious code in ali-in-wlnd-test-1 (npm)
- Jul 10, 2024
Malware in ali-in-wlnd-test-1
1 compromised version
- Jul 10, 2024
Malware in noblox-ts
1 compromised version
- Jul 10, 2024
Malicious code in sap-access (npm)
1 compromised version
- Jul 10, 2024
Malicious code in eslint-plugin-ally-rules (npm)
1 compromised version
- Jul 10, 2024
Malicious code in job-specs (npm)
1 compromised version
- Jul 10, 2024
Malicious code in aroly-test (npm)
5 compromised versions
- Jul 9, 2024
Malicious code in your-types-export-file (npm)
- Jul 9, 2024
Malicious code in carousal (npm)
- Jul 9, 2024
Malicious code in addcohort (npm)
- Jul 9, 2024
Malicious code in action-utils (npm)
- Jul 9, 2024
Malware in your-types-export-file
1 compromised version
- Jul 9, 2024
Malware in carousal
1 compromised version
- Jul 9, 2024
Malware in addcohort
1 compromised version
- Jul 9, 2024
Malware in action-utils
1 compromised version
- Jul 9, 2024
Malicious code in noblox-ts (npm)
2 compromised versions
- Jul 8, 2024
Malicious code in uppgrade (npm)
- Jul 8, 2024
Malware in uppgrade
1 compromised version
- Jul 8, 2024
Malicious code in portal-ui-lib (npm)
- Jul 8, 2024
Malicious code in guilib-wc (npm)
- Jul 8, 2024
Malicious code in css-rule-extractor (npm)
- Jul 8, 2024
Malicious code in brightspot-styleguide (npm)
- Jul 8, 2024
Malware in brightspot-styleguide
1 compromised version
- Jul 8, 2024
Malware in portal-ui-lib
1 compromised version
- Jul 8, 2024
Malware in guilib-wc
1 compromised version
- Jul 8, 2024
Malware in css-rule-extractor
1 compromised version
- MAL-2024-7773MalwarenpmlllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllJul 8, 2024
Malicious code in lllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllll (npm)
- GHSA-88v7-3f4j-74gxMalwarenpmlllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllJul 8, 2024
Malware in lllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllll
1 compromised version
- Jul 8, 2024
Malicious code in cdnjquery (npm)
1 compromised version
- Jul 8, 2024
Malware in cdnjquery
1 compromised version
- Jul 6, 2024
Malicious code in textfx (npm)
1 compromised version
- Jul 6, 2024
Malicious code in fake-package-agpl-license (npm)
1 compromised version
- Jul 6, 2024
Malicious code in fake-package-apache-with-copyleft-dep (npm)
1 compromised version
- Jul 6, 2024
Malicious code in dependent-package (npm)
1 compromised version
- Jul 6, 2024
Malicious code in genaiscript-core (npm)
1 compromised version
- Jul 6, 2024
Malicious code in branch-deploy-action (npm)
2 compromised versions
- Jul 6, 2024
Malicious code in @fake-registry/b (npm)
2 compromised versions
- Jul 6, 2024
Malicious code in @fake-registry/a (npm)
2 compromised versions
- Jul 6, 2024
Malicious code in react-devtools-fusebox (npm)
2 compromised versions
- Jul 5, 2024
Malicious code in compiler-wasm-lib (npm)
1 compromised version
- Jul 5, 2024
Malicious code in sxrcan.db (npm)
Page 6147 of 6,646