Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,266 total in npm · sorted newest first- Jun 25, 2024
Malicious code in oranges_gs_locals (npm)
1 compromised version
- Jun 25, 2024
Malicious code in orange_gs_locals (npm)
1 compromised version
- Jun 25, 2024
Malicious code in orange_gs_local (npm)
1 compromised version
- Jun 25, 2024
Malicious code in opux (npm)
1 compromised version
- Jun 25, 2024
Malicious code in option_label (npm)
1 compromised version
- Jun 25, 2024
Malicious code in operaextensions.js (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in opensource-website (npm)
1 compromised version
- Jun 25, 2024
Malicious code in opencagegeocode (npm)
1 compromised version
- Jun 25, 2024
Malicious code in openapi-to-graphql-root (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ooredoo-cms (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ontology-starter-react-app (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in online-creed-3-watch-fullmovies-free-hdshomes (npm)
1 compromised version
- Jun 25, 2024
Malicious code in online-creed-3-watch-full-movies-free-hd-from-home (npm)
1 compromised version
- Jun 25, 2024
Malicious code in online-creed-3-watch-full-movies-free-hd (npm)
1 compromised version
- Jun 25, 2024
Malicious code in onewelcome-react-native-sdk (npm)
1 compromised version
- Jun 25, 2024
Malicious code in onenote-meetings (npm)
1 compromised version
- Jun 25, 2024
Malicious code in one-amex-wrapper (npm)
1 compromised version
- Jun 25, 2024
Malicious code in onboarding-appcues (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in on-ver-john-wick-4-cuevana3-pelicula-completa-en-espanol-latino (npm)
1 compromised version
- Jun 25, 2024
Malicious code in old-identity-sdk (npm)
1 compromised version
- MAL-2024-2786Malwarenpmohn_here_now_to_watch_john_wick_chapter_4_2023_full_movies_online_at_home-sjdJun 25, 2024
Malicious code in ohn_here_now_to_watch_john_wick_chapter_4_2023_full_movies_online_at_home-sjd (npm)
1 compromised version
- Jun 25, 2024
Malicious code in office-fluid-container (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in odyssey-stylelint (npm)
1 compromised version
- Jun 25, 2024
Malicious code in odyssey-commitlint (npm)
1 compromised version
- Jun 25, 2024
Malicious code in odsp-shared (npm)
1 compromised version
- Jun 25, 2024
Malicious code in oauth-connect-popup (npm)
1 compromised version
- Jun 25, 2024
Malicious code in oauth-connect (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in nxtport (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in nvm_jquery (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in numberphonegen (npm)
1 compromised version
- Jun 25, 2024
Malicious code in null_hash_grab_decode (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ntm001-module (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in npm_package_dependencies_mailcheck (npm)
1 compromised version
- Jun 25, 2024
Malicious code in npm_package_dependencies__shopify_monorail (npm)
1 compromised version
- Jun 25, 2024
Malicious code in npm_package_babel_presets_1_0 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in npm.kiwicom__smart-faq-sidebar.node_modules-ua (npm)
1 compromised version
- Jun 25, 2024
Malicious code in npm-tpgroup-common (npm)
1 compromised version
- Jun 25, 2024
Malicious code in npm-research-package-1 (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in npm-research-bad-2 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in npm-package-test-deadbeef (npm)
1 compromised version
- Jun 25, 2024
Malicious code in npe-toolkit-tools (npm)
1 compromised version
- Jun 25, 2024
Malicious code in noticeable-static (npm)
1 compromised version
- Jun 25, 2024
Malicious code in node-winnative (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in noblox.js-secure (npm)
5 compromised versions
- Jun 25, 2024
Malicious code in noblox.js-scraper (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in noblox.js-capsolver (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in no-style-files-yet (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ng-filter-convert (npm)
1 compromised version
- Jun 25, 2024
Malicious code in nflx-blesk (npm)
1 compromised version
- Jun 25, 2024
Malicious code in news-site (npm)
2 compromised versions
Page 6184 of 6,646