Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,265 total in npm · sorted newest first- Apr 10, 2024
Malware in @lbnqduy11805/shiny-rotary-phone
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/sturdy-waddle
1 compromised version
- Apr 10, 2024
Malicious code in @lbnqduy11805/studious-octo-waddle (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/studious-memory (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/special-funicular (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/reimagined-happiness (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/redesigned-journey (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/expert-waddle (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/animated-doodle (npm)
- Apr 10, 2024
Malware in @lbnqduy11805/special-funicular
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/reimagined-happiness
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/studious-memory
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/studious-octo-waddle
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/animated-doodle
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/redesigned-journey
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/expert-waddle
1 compromised version
- Apr 10, 2024
Malicious code in @lbnqduy11805/psychic-journey (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/ideal-octo-spork (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/cautious-octo-rotary-phone (npm)
- Apr 10, 2024
Malware in @lbnqduy11805/psychic-journey
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/cautious-octo-rotary-phone
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/ideal-octo-spork
1 compromised version
- Apr 10, 2024
Malicious code in test-npm-lifecycle (npm)
- Apr 10, 2024
Malicious code in shuaishuaiqiang (npm)
- Apr 10, 2024
Malicious code in shuaishuai (npm)
- Apr 10, 2024
Malicious code in shuaiqiang (npm)
- Apr 10, 2024
Malicious code in benjimain (npm)
- Apr 10, 2024
Malware in benjimain
1 compromised version
- Apr 10, 2024
Malware in test-npm-lifecycle
1 compromised version
- Apr 10, 2024
Malware in shuaishuaiqiang
1 compromised version
- Apr 10, 2024
Malware in shuaishuai
1 compromised version
- Apr 10, 2024
Malware in shuaiqiang
1 compromised version
- Apr 10, 2024
Malicious code in @sber-site/sbercraft-nova-kit (npm)
- Apr 10, 2024
Malware in @sber-site/sbercraft-nova-kit
1 compromised version
- Apr 10, 2024
Malicious code in @sber-sd/assistant-web-sdk (npm)
- Apr 10, 2024
Malware in @sber-sd/assistant-web-sdk
1 compromised version
- Apr 8, 2024
Malware in f3ngtest12345677
1 compromised version
- Apr 8, 2024
Malicious code in tokenaddress (npm)
- Apr 8, 2024
Malware in tokenaddress
1 compromised version
- Apr 8, 2024
Malicious code in recxn-logs (npm)
- Apr 8, 2024
Malicious code in recxn-backup (npm)
- Apr 8, 2024
Malware in recxn-logs
1 compromised version
- Apr 8, 2024
Malware in recxn-backup
1 compromised version
- Apr 8, 2024
Malicious code in f3ngtest12345677 (npm)
3 compromised versions
- Apr 8, 2024
Malicious code in djs-colora (npm)
- Apr 8, 2024
Malicious code in discord-logs-v14 (npm)
- Apr 8, 2024
Malware in djs-colora
1 compromised version
- Apr 8, 2024
Malware in discord-logs-v14
1 compromised version
- Apr 8, 2024
Malicious code in payable-js-ipg-sdk-suba (npm)
- Apr 8, 2024
Malicious code in payable-js-ipg-sdk (npm)
Page 6224 of 6,646