Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,238 total in npm · sorted newest first- Jan 24, 2024
Malicious code in wlwz-2312-8003 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8001 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-8000 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7908 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7907 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7906 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7905 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7904 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7903 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7902 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7901 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7900 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7808 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7807 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7806 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7805 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7804 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7803 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7802 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7801 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7800 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7708 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7707 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7706 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7605 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7604 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7603 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7602 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7601 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7600 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7508 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7507 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7506 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7505 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7504 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7503 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7502 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7501 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7500 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7408 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7407 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-6601 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-4405 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-4404 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-4308 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-4200 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-4001 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3602 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-1705 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-1601 (npm)
Page 6234 of 6,645