Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,265 total in npm · sorted newest first- Apr 15, 2024
Malware in heroicons1
1 compromised version
- Apr 15, 2024
Malware in trip-component-platform-online-header
1 compromised version
- Apr 15, 2024
Malicious code in wt-fe-buz-utilities-collection (npm)
- Apr 15, 2024
Malware in wt-fe-buz-utilities-collection
1 compromised version
- Apr 10, 2024
Malicious code in @lbnqduy11805/turbo-octo-memory (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/super-duper-train (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/sturdy-chainsaw (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/refactored-octo-carnival (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/psychic-waffle (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/congenial-octo-guide (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/bookish-sniffle (npm)
- Apr 10, 2024
Malware in @lbnqduy11805/psychic-waffle
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/refactored-octo-carnival
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/bookish-sniffle
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/super-duper-train
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/sturdy-chainsaw
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/congenial-octo-guide
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/turbo-octo-memory
1 compromised version
- Apr 10, 2024
Malicious code in @lbnqduy11805/verbose-pancake (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/urban-octo-adventure (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/sturdy-waddle (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/stunning-octo-parakeet (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/stunning-fishstick (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/special-palm-tree (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/silver-parakeet (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/shiny-rotary-phone (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/refactored-eureka (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/potential-octo-enigma (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/potential-giggle (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/musical-doodle (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/miniature-train (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/miniature-garbanzo (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/legendary-octo-carnival (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/friendly-doodle (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/congenial-dollop (npm)
- Apr 10, 2024
Malware in @lbnqduy11805/urban-octo-adventure
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/congenial-dollop
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/miniature-train
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/verbose-pancake
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/refactored-eureka
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/miniature-garbanzo
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/friendly-doodle
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/potential-octo-enigma
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/potential-giggle
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/musical-doodle
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/special-palm-tree
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/silver-parakeet
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/stunning-fishstick
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/stunning-octo-parakeet
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/legendary-octo-carnival
1 compromised version
Page 6223 of 6,646