Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,265 total in npm · sorted newest first- May 19, 2024
Malware in mixtral-llm
1 compromised version
- May 19, 2024
Malicious code in brand-adidas-design-tokens (npm)
- May 19, 2024
Malicious code in brand-adidas-asset-fonts (npm)
- May 19, 2024
Malware in brand-adidas-asset-fonts
1 compromised version
- May 19, 2024
Malware in brand-adidas-design-tokens
1 compromised version
- May 15, 2024
Malicious code in sigoner (npm)
- May 15, 2024
Malware in sigoner
1 compromised version
- May 13, 2024
Malicious code in by-logger (npm)
- May 13, 2024
Malicious code in by-dynamic-domain (npm)
9 compromised versions
- May 13, 2024
Malware in by-dynamic-domain
1 compromised version
- May 13, 2024
Malware in by-fetch
1 compromised version
- May 13, 2024
Malware in by-logger
1 compromised version
- May 13, 2024
Malicious code in qaqazzaaa (npm)
- May 13, 2024
Malware in qaqazzaaa
1 compromised version
- May 13, 2024
Malicious code in @asdfvr/qaqazzaaa (npm)
- May 13, 2024
Malware in @asdfvr/qaqazzaaa
1 compromised version
- May 13, 2024
Malicious code in discord-datas (npm)
- May 13, 2024
Malware in discord-datas
1 compromised version
- May 13, 2024
Malicious code in input-fns (npm)
- May 13, 2024
Malicious code in encodelen (npm)
- May 13, 2024
Malware in encodelen
1 compromised version
- May 13, 2024
Malware in input-fns
1 compromised version
- May 11, 2024
Malicious code in by-fetch (npm)
14 compromised versions
- May 9, 2024
Malicious code in fadam-module (npm)
- May 9, 2024
Malware in fadam-module
1 compromised version
- May 9, 2024
Malicious code in @content-platform/shared (npm)
- May 9, 2024
Malicious code in @content-platform/fadam-module (npm)
- May 9, 2024
Malware in @content-platform/shared
1 compromised version
- May 9, 2024
Malware in @content-platform/fadam-module
1 compromised version
- May 9, 2024
Malware in minecraft-net-core-services
1 compromised version
- May 8, 2024
Malware in ing-feat-grants-management
1 compromised version
- May 8, 2024
Malicious code in @assistedtax/demo (npm)
- May 8, 2024
Malware in @assistedtax/demo
1 compromised version
- May 8, 2024
Malicious code in reduction-ping (npm)
- May 8, 2024
Malicious code in ping-bot-reduction (npm)
2 compromised versions
- May 8, 2024
Malicious code in discord-bot-3 (npm)
1 compromised version
- May 8, 2024
Malicious code in bot-login-plugins (npm)
1 compromised version
- May 8, 2024
Malware in bot-login-plugins
1 compromised version
- May 8, 2024
Malware in discord-bot-3
1 compromised version
- May 8, 2024
Malware in ping-bot-reduction
1 compromised version
- May 8, 2024
Malware in reduction-ping
1 compromised version
- May 8, 2024
Malicious code in sc-chimerra (npm)
1 compromised version
- May 8, 2024
Malicious code in sc-chimeraa (npm)
1 compromised version
- May 8, 2024
Malicious code in sc-chimer (npm)
1 compromised version
- May 8, 2024
Malware in sc-chimerra
1 compromised version
- May 8, 2024
Malware in sc-chimer
1 compromised version
- May 8, 2024
Malware in sc-chimeraa
1 compromised version
- May 8, 2024
Malicious code in jhsdfgghsdfjhds (npm)
7 compromised versions
- May 8, 2024
Malicious code in generic-synthetic-nodejs (npm)
6 compromised versions
- May 8, 2024
Malware in generic-synthetic-nodejs
1 compromised version
Page 6219 of 6,646