Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,238 total in npm · sorted newest first- Jan 24, 2024
Malware in wlwz-2312-3206
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-0100
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-0703
1 compromised version
- Jan 24, 2024
Malware in wlwz-2311-6208
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-3808
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-1908
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-1305
1 compromised version
- Jan 24, 2024
Malware in wlwz-2311-4202
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-3205
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-5105
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-0702
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-3900
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-5106
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-4503
1 compromised version
- Jan 24, 2024
Malware in wlwz-2311-4901
1 compromised version
- Jan 24, 2024
Malicious code in wlwz-2311-3503 (npm)
- Jan 24, 2024
Malicious code in wlwz-2311-2105 (npm)
- Jan 24, 2024
Malicious code in wlwz-2311-1406 (npm)
- Jan 24, 2024
Malicious code in wlwz-2311-0707 (npm)
- Jan 24, 2024
Malicious code in wlwz-2311-0100 (npm)
- Jan 24, 2024
Malware in wlwz-2311-3503
1 compromised version
- Jan 24, 2024
Malware in wlwz-2311-2105
1 compromised version
- Jan 24, 2024
Malware in wlwz-2311-0707
1 compromised version
- Jan 24, 2024
Malware in wlwz-2311-1406
1 compromised version
- Jan 24, 2024
Malware in wlwz-2311-0100
1 compromised version
- Jan 24, 2024
Malicious code in epsilonprotect (npm)
- Jan 24, 2024
Malicious code in epsilonapi (npm)
- Jan 24, 2024
Malware in epsilonapi
1 compromised version
- Jan 24, 2024
Malware in epsilonprotect
1 compromised version
- Jan 23, 2024
Malicious code in discord.js-sounds (npm)
6 compromised versions
- Jan 23, 2024
Malicious code in gothics-api (npm)
- Jan 23, 2024
Malicious code in gothic-token (npm)
- Jan 23, 2024
Malicious code in discord.js-gothic (npm)
- Jan 23, 2024
Malicious code in api-gothic (npm)
- Jan 23, 2024
Malware in gothics-api
1 compromised version
- Jan 23, 2024
Malware in gothic-token
1 compromised version
- Jan 23, 2024
Malware in discord.js-gothic
1 compromised version
- Jan 23, 2024
Malware in api-gothic
1 compromised version
- Jan 22, 2024
Malicious code in discord.js-sound (npm)
9 compromised versions
- Jan 22, 2024
Malicious code in cagov-template-development (npm)
1 compromised version
- Jan 22, 2024
Malicious code in california-state-web-template-react (npm)
1 compromised version
- Jan 22, 2024
Malicious code in orchidnet-web (npm)
1 compromised version
- Jan 22, 2024
Malicious code in cagov-template-v6 (npm)
1 compromised version
- Jan 22, 2024
Malicious code in genealogy-angular (npm)
1 compromised version
- Jan 22, 2024
Malicious code in sample-schema-mgmt (npm)
1 compromised version
- Jan 22, 2024
Malicious code in vscode-mlir (npm)
2 compromised versions
- Jan 22, 2024
Malicious code in materialxtest (npm)
1 compromised version
- Jan 22, 2024
Malicious code in djs-fetcher (npm)
- Jan 22, 2024
Malicious code in discordjs-fetcher (npm)
- Jan 22, 2024
Malware in djs-fetcher
1 compromised version
Page 6263 of 6,645