Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,265 total in npm · sorted newest first- Jun 20, 2024
Malicious code in melichat-component-library (npm)
1 compromised version
- Jun 20, 2024
Malicious code in trip-component-platform-online-region-selector (npm)
1 compromised version
- Jun 20, 2024
Malicious code in wordpress-theme-core (npm)
3 compromised versions
- Jun 20, 2024
Malicious code in tyk-developer-portal (npm)
2 compromised versions
- Jun 20, 2024
Malicious code in storefront-h5-sdk (npm)
1 compromised version
- Jun 20, 2024
Malicious code in comet-chat-react-ui-kit (npm)
2 compromised versions
- Jun 20, 2024
Malicious code in logoo (npm)
- Jun 20, 2024
Malicious code in imageg (npm)
- Jun 20, 2024
Malicious code in desainnew (npm)
- Jun 20, 2024
Malicious code in desain (npm)
- Jun 20, 2024
Malware in desain
1 compromised version
- Jun 20, 2024
Malware in imageg
1 compromised version
- Jun 20, 2024
Malware in desainnew
1 compromised version
- Jun 20, 2024
Malware in logoo
1 compromised version
- Jun 20, 2024
Malicious code in dsain (npm)
- Jun 20, 2024
Malware in dsain
1 compromised version
- Jun 20, 2024
Malicious code in nt4padyp (npm)
- Jun 20, 2024
Malicious code in nodem0m (npm)
- Jun 20, 2024
Malware in nodem0m
1 compromised version
- Jun 20, 2024
Malware in nt4padyp
1 compromised version
- Jun 20, 2024
Malicious code in pwi-cfa-components (npm)
- Jun 20, 2024
Malware in test-package-random-name-for-test
1 compromised version
- Jun 20, 2024
Malware in pwi-cfa-components
1 compromised version
- Jun 19, 2024
Malicious code in test-package-random-name-for-test (npm)
1 compromised version
- Jun 19, 2024
Malicious code in @wdpx/themes (npm)
1 compromised version
- Jun 18, 2024
Malicious code in draconianspeed (npm)
1 compromised version
- Jun 18, 2024
Malicious code in mvp-website-html (npm)
1 compromised version
- Jun 18, 2024
Malicious code in resolve-uri-latest (npm)
1 compromised version
- Jun 18, 2024
Malicious code in vivid_framework (npm)
1 compromised version
- Jun 18, 2024
Malicious code in rb-fare-breakup (npm)
- Jun 18, 2024
Malware in rb-payment-input
1 compromised version
- Jun 18, 2024
Malware in rb-fare-breakup
1 compromised version
- Jun 18, 2024
Malware in rb-info-banner
1 compromised version
- Jun 18, 2024
Malware in rb-accordion
1 compromised version
- Jun 18, 2024
Malware in vivid_framework
1 compromised version
- Jun 18, 2024
Malicious code in rb-info-banner (npm)
1 compromised version
- Jun 18, 2024
Malicious code in rb-accordion (npm)
1 compromised version
- Jun 18, 2024
Malicious code in rb-payment-input (npm)
1 compromised version
- Jun 18, 2024
Malicious code in stylee-logo (npm)
- Jun 18, 2024
Malicious code in mediaa (npm)
- Jun 18, 2024
Malicious code in logooo (npm)
- Jun 18, 2024
Malicious code in logo-stylee (npm)
- Jun 18, 2024
Malicious code in imagezz (npm)
- Jun 18, 2024
Malicious code in detailimg (npm)
- Jun 18, 2024
Malicious code in desainlgo (npm)
- Jun 18, 2024
Malware in logooo
1 compromised version
- Jun 18, 2024
Malware in desainlgo
1 compromised version
- Jun 18, 2024
Malware in logo-stylee
1 compromised version
- Jun 18, 2024
Malware in stylee-logo
1 compromised version
- Jun 18, 2024
Malware in mediaa
1 compromised version
Page 6209 of 6,646