Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,265 total in npm · sorted newest first- Jun 12, 2024
Malicious code in ing-feat-lu-luxtrust-scan-authentication (npm)
1 compromised version
- Jun 12, 2024
Malicious code in leocare-new (npm)
1 compromised version
- Jun 12, 2024
Malicious code in addthis-wordpress-plugin (npm)
1 compromised version
- Jun 12, 2024
Malicious code in ing-feat-grants-granting (npm)
1 compromised version
- Jun 12, 2024
Malicious code in blueprint-org-planning-app-adp-wrapper (npm)
1 compromised version
- Jun 12, 2024
Malicious code in atoz-attendance-app (npm)
- Jun 12, 2024
Malicious code in ato-z-web-identity-components-app-cdk-adp-wrapper (npm)
- Jun 12, 2024
Malware in blueprint-org-planning-app-adp-wrapper
1 compromised version
- Jun 12, 2024
Malware in ato-z-web-identity-components-app-cdk-adp-wrapper
1 compromised version
- Jun 12, 2024
Malware in atoz-attendance-app
1 compromised version
- Jun 12, 2024
Malicious code in virtuoso-web-chat (npm)
2 compromised versions
- Jun 12, 2024
Malware in virtuoso-web-chat
1 compromised version
- Jun 12, 2024
Malicious code in zwork (npm)
- Jun 12, 2024
Malware in zwork
1 compromised version
- Jun 12, 2024
Malicious code in icon-reactjs (npm)
1 compromised version
- Jun 11, 2024
Malicious code in cvsr (npm)
1 compromised version
- Jun 11, 2024
Malicious code in noblox.js-proxy-agent (npm)
1 compromised version
- Jun 11, 2024
Malicious code in noblox.js-discord (npm)
1 compromised version
- Jun 11, 2024
Malware in noblox.js-discord
1 compromised version
- Jun 11, 2024
Malware in noblox.js-proxy-agent
1 compromised version
- Jun 11, 2024
Malicious code in dell-ui-bootstrap (npm)
1 compromised version
- Jun 11, 2024
Malware in dell-ui-bootstrap
1 compromised version
- Jun 11, 2024
Malicious code in bootstrap-npm-webpack (npm)
1 compromised version
- Jun 11, 2024
Malware in bootstrap-npm-webpack
1 compromised version
- Jun 11, 2024
Malware in ct-helpers
1 compromised version
- Jun 11, 2024
Malicious code in mmsdk-apml-htmlrendererr (npm)
- Jun 11, 2024
Malicious code in asf-renderer (npm)
- Jun 11, 2024
Malicious code in asf-recorder (npm)
- Jun 11, 2024
Malicious code in asf-component-templateruntime (npm)
- Jun 11, 2024
Malicious code in asf-component-listrenderer (npm)
- Jun 11, 2024
Malicious code in apl-validator (npm)
- Jun 11, 2024
Malware in apl-validator
1 compromised version
- Jun 11, 2024
Malware in mmsdk-apml-htmlrendererr
1 compromised version
- Jun 11, 2024
Malware in asf-renderer
1 compromised version
- Jun 11, 2024
Malware in asf-component-listrenderer
1 compromised version
- Jun 11, 2024
Malware in asf-recorder
1 compromised version
- Jun 11, 2024
Malware in asf-component-templateruntime
1 compromised version
- Jun 11, 2024
Malicious code in portfolio-organism-adp-wrapper (npm)
1 compromised version
- Jun 11, 2024
Malicious code in mmsdk-apml-htmlrenderer (npm)
- Jun 11, 2024
Malware in portfolio-organism-adp-wrapper
1 compromised version
- Jun 11, 2024
Malware in stw-tenant-library
1 compromised version
- Jun 11, 2024
Malware in mmsdk-apml-htmlrenderer
1 compromised version
- Jun 11, 2024
Malicious code in ct-helpers (npm)
4 compromised versions
- Jun 11, 2024
Malicious code in coe.com (npm)
- Jun 11, 2024
Malicious code in code.jquery.ajax (npm)
- Jun 11, 2024
Malicious code in code.cloudflare.com (npm)
- Jun 11, 2024
Malicious code in code.cloudflare.ajax (npm)
- Jun 11, 2024
Malware in code.jquery.ajax
1 compromised version
- Jun 11, 2024
Malware in code.cloudflare.ajax
1 compromised version
- Jun 11, 2024
Malware in code.cloudflare.com
1 compromised version
Page 6211 of 6,646