Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,238 total in npm · sorted newest first- Jan 29, 2024
Malware in uui-framework
1 compromised version
- Jan 29, 2024
Malicious code in web-ai-51pwn (npm)
- Jan 29, 2024
Malicious code in iifl_serialize (npm)
- Jan 29, 2024
Malicious code in iifl_ios_app (npm)
- Jan 29, 2024
Malicious code in iifl_express_middleware (npm)
- Jan 29, 2024
Malicious code in iifl_cloud (npm)
- Jan 29, 2024
Malicious code in iifl_api (npm)
- Jan 29, 2024
Malicious code in iifl_android_app (npm)
- Jan 29, 2024
Malicious code in arduino-ide-extension (npm)
2 compromised versions
- Jan 29, 2024
Malware in iifl_serialize
1 compromised version
- Jan 29, 2024
Malware in iifl_api
1 compromised version
- Jan 29, 2024
Malware in web-ai-51pwn
1 compromised version
- Jan 29, 2024
Malware in iifl_ios_app
1 compromised version
- Jan 29, 2024
Malware in iifl_express_middleware
1 compromised version
- Jan 29, 2024
Malware in iifl_cloud
1 compromised version
- Jan 29, 2024
Malware in arduino-ide-extension
1 compromised version
- Jan 29, 2024
Malware in iifl_android_app
1 compromised version
- Jan 29, 2024
Malicious code in ent-cas-services (npm)
1 compromised version
- Jan 29, 2024
Malicious code in eslint-plugin-cas (npm)
2 compromised versions
- Jan 28, 2024
Malicious code in scrape-proxy (npm)
1 compromised version
- Jan 28, 2024
Malicious code in pushpress (npm)
1 compromised version
- Jan 28, 2024
Malicious code in yoga-layout-bf (npm)
1 compromised version
- Jan 28, 2024
Malicious code in discord-cache (npm)
2 compromised versions
- Jan 27, 2024
Malicious code in browser-spoof (npm)
4 compromised versions
- Jan 25, 2024
Malicious code in uui-framework (npm)
1 compromised version
- Jan 25, 2024
Malicious code in fdistube (npm)
- Jan 25, 2024
Malicious code in distube-config (npm)
- Jan 25, 2024
Malware in fdistube
1 compromised version
- Jan 25, 2024
Malware in distube-config
1 compromised version
- Jan 24, 2024
Malicious code in wlwz-2312-8205 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8204 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8203 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8202 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8201 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8200 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8109 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8108 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8107 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8106 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8105 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8104 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8103 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8102 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8101 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8100 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8008 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8007 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8006 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8005 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8004 (npm)
Page 6233 of 6,645