Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,265 total in npm · sorted newest first- Apr 8, 2024
Malware in payable-js-ipg-sdk
1 compromised version
- Apr 8, 2024
Malware in payable-js-ipg-sdk-suba
1 compromised version
- Apr 8, 2024
Malware in nespresso-bi
1 compromised version
- Apr 6, 2024
Malicious code in stake-api (npm)
1 compromised version
- Apr 5, 2024
Malicious code in nespresso-bi (npm)
5 compromised versions
- Apr 4, 2024
Malicious code in lodash-electron (npm)
- Apr 4, 2024
Malware in lodash-electron
1 compromised version
- Apr 4, 2024
Malicious code in locus-website (npm)
1 compromised version
- Apr 4, 2024
Malicious code in tme-finance (npm)
1 compromised version
- Apr 4, 2024
Malicious code in context-hydrating (npm)
- Apr 4, 2024
Malware in context-hydrating
1 compromised version
- Apr 3, 2024
Malicious code in shopify-app-session-storage-prisma (npm)
- Apr 3, 2024
Malicious code in shopify-app-session-storage-drizzle (npm)
3 compromised versions
- Apr 3, 2024
Malicious code in shopify-app-js (npm)
- Apr 3, 2024
Malicious code in package-ddgjhd-weagd-24h (npm)
1 compromised version
- Apr 3, 2024
Malicious code in hydrogen-sfdgspsdmq-test1 (npm)
10 compromised versions
- Apr 3, 2024
Malware in hydrogen-sfdgspsdmq-test1
1 compromised version
- Apr 3, 2024
Malware in shopify-app-js
1 compromised version
- Apr 3, 2024
Malware in shopify-app-session-storage-prisma
1 compromised version
- Apr 3, 2024
Malware in package-ddgjhd-weagd-24h
1 compromised version
- Apr 3, 2024
Malware in shopify-app-session-storage-drizzle
1 compromised version
- Apr 3, 2024
Malicious code in package-dfgpd-dfgdfg-24h (npm)
1 compromised version
- Apr 3, 2024
Malware in package-dfgpd-dfgdfg-24h
1 compromised version
- Apr 3, 2024
Malicious code in metacord (npm)
- Apr 3, 2024
Malware in metacord
1 compromised version
- Apr 2, 2024
Malicious code in qlik-sense-dev (npm)
2 compromised versions
- Apr 2, 2024
Malicious code in qlik-sense-poc (npm)
3 compromised versions
- Apr 2, 2024
Malicious code in xo-page-test-components (npm)
1 compromised version
- Apr 2, 2024
Malware in galileo-web-sdk
1 compromised version
- Apr 2, 2024
Malware in iotnet
1 compromised version
- Apr 2, 2024
Malware in soundcloud-songs
1 compromised version
- Apr 2, 2024
Malware in shelllib
1 compromised version
- Apr 2, 2024
Malicious code in u-workflow.module.common.visibility (npm)
- Apr 2, 2024
Malicious code in u-workflow.module.common.tech (npm)
- Apr 2, 2024
Malicious code in u-workflow.auth (npm)
- Apr 2, 2024
Malware in u-workflow.auth
1 compromised version
- Apr 2, 2024
Malware in u-workflow.module.common.hour-of-week
1 compromised version
- Apr 2, 2024
Malware in u-workflow.module.common.tech
1 compromised version
- Apr 2, 2024
Malware in u-workflow.module.common.visibility
1 compromised version
- Apr 2, 2024
Malicious code in pt-api-tools (npm)
2 compromised versions
- Apr 2, 2024
Malware in pt-api-tools
1 compromised version
- Apr 2, 2024
Malicious code in paysafe-gpf-as-http-proxy-middleware-body-replace (npm)
1 compromised version
- Apr 2, 2024
Malicious code in paysafe-gpf-as-communication-lib-fe (npm)
1 compromised version
- Apr 2, 2024
Malware in paysafe-gpf-as-communication-lib-fe
1 compromised version
- Apr 2, 2024
Malware in paysafe-gpf-as-http-proxy-middleware-body-replace
1 compromised version
- Apr 1, 2024
Malicious code in vue2util (npm)
- Apr 1, 2024
Malware in vue2util
1 compromised version
- Apr 1, 2024
Malicious code in hds-input (npm)
1 compromised version
- Apr 1, 2024
Malicious code in iotnet (npm)
1 compromised version
- Apr 1, 2024
Malicious code in soundcloud-songs (npm)
2 compromised versions
Page 6225 of 6,646