Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,238 total in npm · sorted newest first- Jan 24, 2024
Malware in wlwz-2312-0103
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-1307
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-4505
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-1308
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-7005
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-6404
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-5800
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-4504
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-7606
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-0705
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-7004
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-7608
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-7006
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-6402
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-5801
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-5108
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-2605
1 compromised version
- Jan 24, 2024
Malicious code in wlwz-2312-5708 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-5106 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-5105 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-4503 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-4502 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3900 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3808 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3206 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3205 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2603 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2602 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2000 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-1908 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-1306 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-1305 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-0703 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-0702 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-0101 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-0100 (npm)
- Jan 24, 2024
Malicious code in wlwz-2311-6907 (npm)
- Jan 24, 2024
Malicious code in wlwz-2311-6208 (npm)
- Jan 24, 2024
Malicious code in wlwz-2311-5600 (npm)
- Jan 24, 2024
Malicious code in wlwz-2311-4901 (npm)
- Jan 24, 2024
Malicious code in wlwz-2311-4202 (npm)
- Jan 24, 2024
Malware in wlwz-2312-0101
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-5708
1 compromised version
- Jan 24, 2024
Malware in wlwz-2311-5600
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-2000
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-1306
1 compromised version
- Jan 24, 2024
Malware in wlwz-2311-6907
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-2603
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-2602
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-4502
1 compromised version
Page 6262 of 6,645