Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,506 total in npm · sorted newest first- Jun 3, 2024
Malware in @juiggitea/consequuntur-iure-maxime
1 compromised version
- Jun 3, 2024
Malware in @juiggitea/consequuntur-iusto-at
1 compromised version
- Jun 3, 2024
Malware in @juiggitea/cupiditate-optio-explicabo
1 compromised version
- Jun 3, 2024
Malicious code in @juiggitea/consequuntur-aperiam-consectetur-incidunt (npm)
- Jun 3, 2024
Malicious code in @juiggitea/commodi-eius-repudiandae (npm)
- Jun 3, 2024
Malicious code in @juiggitea/aut-autem-voluptatem (npm)
- Jun 3, 2024
Malicious code in @juiggitea/asperiores-voluptatum-quos-velit (npm)
- Jun 3, 2024
Malicious code in @juiggitea/architecto-voluptas-modi (npm)
- Jun 3, 2024
Malware in @juiggitea/commodi-eius-repudiandae
1 compromised version
- Jun 3, 2024
Malware in @juiggitea/aut-autem-voluptatem
1 compromised version
- Jun 3, 2024
Malware in @juiggitea/consequuntur-aperiam-consectetur-incidunt
1 compromised version
- Jun 3, 2024
Malware in @juiggitea/architecto-voluptas-modi
1 compromised version
- Jun 3, 2024
Malware in @juiggitea/asperiores-voluptatum-quos-velit
1 compromised version
- Jun 3, 2024
Malicious code in @juiggitea/aperiam-facilis-molestias-mollitia (npm)
- Jun 3, 2024
Malicious code in @juiggitea/aperiam-aperiam-amet-exercitationem (npm)
- Jun 3, 2024
Malicious code in @juiggitea/amet-cupiditate-fugiat (npm)
- Jun 3, 2024
Malicious code in @juiggitea/amet-beatae-voluptatum-cum (npm)
- Jun 3, 2024
Malicious code in @juiggitea/aliquam-at-eius (npm)
- Jun 3, 2024
Malicious code in @juiggitea/alias-excepturi-quod-aut (npm)
- Jun 3, 2024
Malware in @juiggitea/aperiam-facilis-molestias-mollitia
1 compromised version
- Jun 3, 2024
Malware in @juiggitea/aliquam-at-eius
1 compromised version
- Jun 3, 2024
Malware in @juiggitea/amet-beatae-voluptatum-cum
1 compromised version
- Jun 3, 2024
Malware in @juiggitea/alias-excepturi-quod-aut
1 compromised version
- Jun 3, 2024
Malware in @juiggitea/amet-cupiditate-fugiat
1 compromised version
- Jun 3, 2024
Malware in @juiggitea/aperiam-aperiam-amet-exercitationem
1 compromised version
- Jun 3, 2024
Malicious code in @juiggitea/a-laboriosam-omnis-praesentium (npm)
- Jun 3, 2024
Malware in @juiggitea/a-laboriosam-omnis-praesentium
1 compromised version
- Jun 3, 2024
Malicious code in stw-tenant-library (npm)
1 compromised version
- Jun 3, 2024
Malicious code in djs-checker (npm)
2 compromised versions
- Jun 3, 2024
Malware in djs-checker
1 compromised version
- Jun 3, 2024
Malicious code in sa-antd (npm)
- Jun 3, 2024
Malicious code in co-pilot-auth_web (npm)
- Jun 3, 2024
Malware in co-pilot-auth_web
1 compromised version
- Jun 3, 2024
Malware in sa-antd
1 compromised version
- Jun 3, 2024
Malware in rich-relevance
1 compromised version
- Jun 3, 2024
Malware in cedar-snippet
1 compromised version
- Jun 3, 2024
Malware in test-pen-testers
1 compromised version
- Jun 3, 2024
Malware in protonme
1 compromised version
- Jun 3, 2024
Malware in nespresso-design-system
1 compromised version
- Jun 3, 2024
Malicious code in seller-journey-ui (npm)
- Jun 3, 2024
Malicious code in eslint-config-bragi (npm)
- Jun 3, 2024
Malware in seller-journey-ui
1 compromised version
- Jun 3, 2024
Malware in eslint-config-bragi
1 compromised version
- Jun 3, 2024
Malicious code in antiraid-zera (npm)
- Jun 3, 2024
Malware in antiraid-zera
1 compromised version
- Jun 3, 2024
Malware in hello-1st-anni
1 compromised version
- Jun 3, 2024
Malware in hydra-player-sdk
1 compromised version
- Jun 2, 2024
Malicious code in wdio-api-client (npm)
1 compromised version
- Jun 2, 2024
Malicious code in mcft_client (npm)
1 compromised version
- Jun 2, 2024
Malicious code in xloportailcfn (npm)
1 compromised version
Page 6202 of 6,631