Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,265 total in npm · sorted newest first- Mar 19, 2024
Malicious code in u-workflow.module.common.webapp (npm)
1 compromised version
- Mar 19, 2024
Malicious code in pulsate (npm)
1 compromised version
- Mar 19, 2024
Malicious code in super-social-sdk (npm)
- Mar 19, 2024
Malware in super-social-sdk
1 compromised version
- Mar 19, 2024
Malware in formvalidationtestauth
1 compromised version
- Mar 19, 2024
Malware in r101-css
1 compromised version
- Mar 19, 2024
Malicious code in @testorgggg/pkg3 (npm)
- Mar 19, 2024
Malware in @testorgggg/pkg3
1 compromised version
- Mar 19, 2024
Malicious code in raydium-connect (npm)
- Mar 19, 2024
Malware in raydium-connect
1 compromised version
- Mar 19, 2024
Malicious code in espn-react-oneid (npm)
1 compromised version
- Mar 19, 2024
Malicious code in abcotv-story-parser (npm)
1 compromised version
- Mar 18, 2024
Malicious code in polaris-resource-list-examples (npm)
- Mar 18, 2024
Malicious code in functions-workshop (npm)
- Mar 18, 2024
Malicious code in flow-code-examples (npm)
- Mar 18, 2024
Malicious code in eng-intern-assessment-react-native (npm)
- Mar 18, 2024
Malicious code in custom-banner-react (npm)
- Mar 18, 2024
Malicious code in action-and-block (npm)
- Mar 18, 2024
Malware in functions-workshop
1 compromised version
- Mar 18, 2024
Malware in polaris-resource-list-examples
1 compromised version
- Mar 18, 2024
Malware in eng-intern-assessment-react-native
1 compromised version
- Mar 18, 2024
Malware in custom-banner-react
1 compromised version
- Mar 18, 2024
Malware in action-and-block
1 compromised version
- Mar 18, 2024
Malware in flow-code-examples
1 compromised version
- Mar 18, 2024
Malicious code in sqltest6 (npm)
- Mar 18, 2024
Malicious code in rancho-extensions-app (npm)
- Mar 18, 2024
Malicious code in packagerandomattackertest (npm)
- Mar 18, 2024
Malicious code in custom-header-js (npm)
- Mar 18, 2024
Malicious code in bouncifyrn (npm)
- Mar 18, 2024
Malware in packagerandomattackertest
1 compromised version
- Mar 18, 2024
Malware in rancho-extensions-app
1 compromised version
- Mar 18, 2024
Malware in sqltest6
1 compromised version
- Mar 18, 2024
Malware in bouncifyrn
1 compromised version
- Mar 18, 2024
Malware in custom-header-js
1 compromised version
- Mar 18, 2024
Malware in soundcloud-scrape
1 compromised version
- Mar 18, 2024
Malicious code in tslint-slick (npm)
3 compromised versions
- Mar 18, 2024
Malicious code in tsconfig-slick (npm)
5 compromised versions
- Mar 18, 2024
Malicious code in babel-preset-slick (npm)
8 compromised versions
- Mar 18, 2024
Malware in tslint-slick
1 compromised version
- Mar 18, 2024
Malware in babel-preset-slick
1 compromised version
- Mar 18, 2024
Malware in tsconfig-slick
1 compromised version
- Mar 18, 2024
Malicious code in abcotv-ads (npm)
1 compromised version
- Mar 17, 2024
Malicious code in abcotv-constants (npm)
1 compromised version
- Mar 17, 2024
Malicious code in discorddevsimple (npm)
1 compromised version
- Mar 17, 2024
Malicious code in formvalidationtestauth (npm)
1 compromised version
- Mar 16, 2024
Malicious code in r101-css (npm)
5 compromised versions
- Mar 15, 2024
Malicious code in ouramerica-constants (npm)
1 compromised version
- Mar 15, 2024
Malicious code in soundcloud-scrape (npm)
2 compromised versions
- Mar 15, 2024
Malware in frosmo-react
1 compromised version
- Mar 15, 2024
Malicious code in frosmo-react (npm)
5 compromised versions
Page 6227 of 6,646