Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,238 total in npm · sorted newest first- Jan 24, 2024
Malware in wlwz-2312-0604
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-0701
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-0501
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-5208
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-0203
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-0401
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-0404
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-7400
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-0606
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-4607
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-7103
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-0805
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-0207
1 compromised version
- Jan 24, 2024
Malicious code in wlwz-2312-7705 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7704 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7703 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7102 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-7101 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-6500 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-6408 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-5806 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-5203 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-4601 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-4600 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-4004 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3907 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3906 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3401 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3305 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3304 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3303 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2706 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2702 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2701 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2700 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2102 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2008 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2006 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-1405 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-1404 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-0803 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-0801 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-0200 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-0109 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-0108 (npm)
- Jan 24, 2024
Malware in wlwz-2312-4600
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-1404
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-7703
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-6500
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-6408
1 compromised version
Page 6258 of 6,645