Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,272 total in npm · sorted newest first- Jul 4, 2024
Malware in @zitterorg/nisi-veniam
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/natus-eos-vel
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/minus-itaque-odit
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/pariatur-asperiores
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/incidunt-cum
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/eos-beatae-aliquid
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/maxime-tenetur
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/eius-sint-sunt
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/odio-itaque-harum
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/dolorem-quibusdam-dicta
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/commodi-eum
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/ipsam-deserunt
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/itaque-quae-dolore
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/consectetur-quos
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/repellendus-ducimus
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/vitae-blanditiis-eum
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/quia-quasi-voluptas
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/iusto-ipsum
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/numquam-assumenda
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/nostrum-voluptatibus
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/vero-possimus
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/quaerat-vitae-sed
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/nemo-distinctio
1 compromised version
- Jul 4, 2024
Malicious code in @zitterorg/voluptates-reprehenderit (npm)
- Jul 4, 2024
Malicious code in @zitterorg/repudiandae-quidem (npm)
- Jul 4, 2024
Malicious code in @zitterorg/quidem-et (npm)
- Jul 4, 2024
Malicious code in @zitterorg/magnam-doloribus (npm)
- Jul 4, 2024
Malicious code in @zitterorg/accusamus-numquam (npm)
- Jul 4, 2024
Malware in @zitterorg/quidem-et
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/magnam-doloribus
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/voluptates-reprehenderit
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/repudiandae-quidem
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/accusamus-numquam
1 compromised version
- Jul 3, 2024
Malicious code in addcriteria (npm)
1 compromised version
- Jul 3, 2024
Malicious code in parser-7.0.0 (npm)
5 compromised versions
- Jul 3, 2024
Malicious code in cli-pkg-test (npm)
5 compromised versions
- Jul 3, 2024
Malware in test-pkg-blabla
1 compromised version
- Jul 3, 2024
Malicious code in render-sample-app (npm)
- Jul 3, 2024
Malicious code in auth0-dashboard-widget (npm)
- Jul 3, 2024
Malicious code in auth0-authz-extension (npm)
- Jul 3, 2024
Malware in auth0-authz-extension
1 compromised version
- Jul 3, 2024
Malware in auth0-dashboard-widget
1 compromised version
- Jul 3, 2024
Malware in render-sample-app
1 compromised version
- Jul 3, 2024
Malware in auth0-mailchimp-export
1 compromised version
- Jul 3, 2024
Malicious code in cra-docs (npm)
1 compromised version
- Jul 3, 2024
Malware in kiln-desktop
1 compromised version
- Jul 3, 2024
Malware in bageth
1 compromised version
- Jul 3, 2024
Malware in bluefin-exchange-contracts-evm
1 compromised version
- Jul 3, 2024
Malware in iobeya-time-utils
1 compromised version
- Jul 3, 2024
Malicious code in msa-common (npm)
4 compromised versions
Page 6160 of 6,646