Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,275 total in npm · sorted newest first- Jul 5, 2024
Malicious code in ilovecats (npm)
- Jul 5, 2024
Malware in sxrcan.db
1 compromised version
- Jul 5, 2024
Malware in ilovecats
1 compromised version
- Jul 4, 2024
Malicious code in react-release-script (npm)
1 compromised version
- Jul 4, 2024
Malicious code in @zitterorg/vitae-non (npm)
- Jul 4, 2024
Malicious code in @zitterorg/velit-occaecati (npm)
- Jul 4, 2024
Malicious code in @zitterorg/totam-quos-dolorem (npm)
- Jul 4, 2024
Malicious code in @zitterorg/totam-adipisci (npm)
- Jul 4, 2024
Malicious code in @zitterorg/tempore-debitis-minima (npm)
- Jul 4, 2024
Malicious code in @zitterorg/sint-veritatis (npm)
- Jul 4, 2024
Malicious code in @zitterorg/repellat-incidunt-distinctio (npm)
- Jul 4, 2024
Malicious code in @zitterorg/rem-optio (npm)
- Jul 4, 2024
Malicious code in @zitterorg/rem-iure (npm)
- Jul 4, 2024
Malicious code in @zitterorg/ratione-quasi-sint (npm)
- Jul 4, 2024
Malicious code in @zitterorg/quod-veritatis (npm)
- Jul 4, 2024
Malicious code in @zitterorg/quis-tempora-excepturi (npm)
- Jul 4, 2024
Malicious code in @zitterorg/quia-modi (npm)
- Jul 4, 2024
Malicious code in @zitterorg/quasi-corrupti-voluptates (npm)
- Jul 4, 2024
Malicious code in @zitterorg/probable-octo (npm)
- Jul 4, 2024
Malicious code in @zitterorg/officiis-nobis-quaerat (npm)
- Jul 4, 2024
Malicious code in @zitterorg/officiis-eveniet (npm)
- Jul 4, 2024
Malicious code in @zitterorg/odit-quae-asperiores (npm)
- Jul 4, 2024
Malicious code in @zitterorg/odio-non (npm)
- Jul 4, 2024
Malicious code in @zitterorg/numquam-itaque (npm)
- Jul 4, 2024
Malicious code in @zitterorg/numquam-aliquam (npm)
- Jul 4, 2024
Malicious code in @zitterorg/nostrum-vel-beatae (npm)
- Jul 4, 2024
Malicious code in @zitterorg/nostrum-non (npm)
- Jul 4, 2024
Malicious code in @zitterorg/nobis-nam (npm)
- Jul 4, 2024
Malicious code in @zitterorg/nemo-tenetur (npm)
- Jul 4, 2024
Malicious code in @zitterorg/minus-quos-velit (npm)
- Jul 4, 2024
Malicious code in @zitterorg/maiores-commodi-ea (npm)
- Jul 4, 2024
Malicious code in @zitterorg/laudantium-rem (npm)
- Jul 4, 2024
Malicious code in @zitterorg/itaque-ab (npm)
- Jul 4, 2024
Malicious code in @zitterorg/incidunt-voluptas (npm)
- Jul 4, 2024
Malicious code in @zitterorg/illum-quidem (npm)
- Jul 4, 2024
Malicious code in @zitterorg/illo-hic-voluptatem (npm)
- Jul 4, 2024
Malicious code in @zitterorg/glowing-barnacle (npm)
- Jul 4, 2024
Malicious code in @zitterorg/fugit-ex-neque (npm)
- Jul 4, 2024
Malicious code in @zitterorg/explicabo-iure (npm)
- Jul 4, 2024
Malicious code in @zitterorg/esse-quae (npm)
- Jul 4, 2024
Malicious code in @zitterorg/ea-quis (npm)
- Jul 4, 2024
Malicious code in @zitterorg/doloribus-quidem-enim (npm)
- Jul 4, 2024
Malicious code in @zitterorg/dolore-dolore-molestias (npm)
- Jul 4, 2024
Malicious code in @zitterorg/dolor-laboriosam (npm)
- Jul 4, 2024
Malicious code in @zitterorg/distinctio-perferendis (npm)
- Jul 4, 2024
Malicious code in @zitterorg/distinctio-hic-aliquam (npm)
- Jul 4, 2024
Malicious code in @zitterorg/dignissimos-quo-velit (npm)
- Jul 4, 2024
Malicious code in @zitterorg/deserunt-beatae-fuga (npm)
- Jul 4, 2024
Malicious code in @zitterorg/delectus-nisi-impedit (npm)
- Jul 4, 2024
Malicious code in @zitterorg/consequuntur-illum-corrupti (npm)
Page 6148 of 6,646