Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,265 total in npm · sorted newest first- Jun 25, 2024
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-lcvr (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-updated-2023-h4wzfs8s-ttt (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-updated-2023-h4wzfs8s-tpd (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-updated-2023-h4wzfs8s-thk (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-updated-2023-h4wzfs8s-mnm (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-updated-2023-h4wzfs8s-mil (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-updated-2023-h4wzfs8s-lsi (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-updated-2023-h4wzfs8s-lof (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-updated-2023-h4wzfs8s-jiz (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-updated-2023-h4wzfs8s-jil (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-updated-2023-h4wzfs8s-file (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-updated-2023-h4wzfs8s-bvc (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-updated-2023-h4wzfs8s-94f (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-updated-2023-h4wzfs8s-4rjz3f-hk (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-updated-2023-h4wzfs8s-4rjz3f (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-2023-update-r56ga (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-2023-update-ghey5 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-2023-update-eyh45 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-2023-update-ey45e (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-2023-update-etuj46 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-2023-update-anusa (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-2023-update-aewea (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-2023-update-aee4sa (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-2023-update-ae4wea (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-2023-update-ae4ssa (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-2023-update-ae4saa (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-2023-update-ae4sa (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-2023-update-ae44sa (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-2023-update-aae4sa (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-2023-update-a98wea (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cash-app-money-generator-new-2023-update-a566ea (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in carrier-portal-ui (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in carditem.stories (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cardcompile (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cameo-react-native-share-story (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in cagov-template-v5.5 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in bykea (npm)
1 compromised version
- Jun 25, 2024
Malicious code in by-storage (npm)
5 compromised versions
- Jun 25, 2024
Malicious code in by-skynet (npm)
5 compromised versions
- Jun 25, 2024
Malicious code in by-network (npm)
5 compromised versions
- Jun 25, 2024
Malicious code in by-gtm (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in bxone-test-flowflowts (npm)
1 compromised version
- Jun 25, 2024
Malicious code in bww-united-app (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in business-kpi-manager (npm)
8 compromised versions
- Jun 25, 2024
Malicious code in bunker-avatar (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in bullshittss (npm)
1 compromised version
- Jun 25, 2024
Malicious code in buildin (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in browserstack-docker-example (npm)
1 compromised version
- Jun 25, 2024
Malicious code in brkr-lib-components-react (npm)
1 compromised version
- Jun 25, 2024
Malicious code in braze-content-cards-inbox (npm)
3 compromised versions
Page 6200 of 6,646