Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,238 total in npm · sorted newest first- Jan 22, 2024
Malware in discordjs-fetcher
1 compromised version
- Jan 22, 2024
Malicious code in apiv1-fetcher (npm)
- Jan 22, 2024
Malware in apiv1-fetcher
1 compromised version
- Jan 22, 2024
Malicious code in ahmadzdzdzdzddddahas (npm)
- Jan 22, 2024
Malware in ahmadzdzdzdzddddahas
1 compromised version
- Jan 21, 2024
Malicious code in syxx.js (npm)
- Jan 21, 2024
Malicious code in shenmue.js-dev (npm)
- Jan 21, 2024
Malicious code in lunar-sb.js (npm)
- Jan 21, 2024
Malware in shenmue.js-dev
1 compromised version
- Jan 21, 2024
Malware in lunar-sb.js
1 compromised version
- Jan 21, 2024
Malware in syxx.js
1 compromised version
- Jan 21, 2024
Malicious code in shenmue-dmall.js (npm)
- Jan 21, 2024
Malicious code in @shenmue_dsc/shenmue.js-stream (npm)
- Jan 21, 2024
Malicious code in @shenmue_dsc/fluent-ffmpeg-multistream-ts (npm)
- Jan 21, 2024
Malware in @shenmue_dsc/fluent-ffmpeg-multistream-ts
1 compromised version
- Jan 21, 2024
Malware in @shenmue_dsc/shenmue.js-stream
1 compromised version
- Jan 21, 2024
Malware in shenmue-dmall.js
1 compromised version
- Jan 21, 2024
Malicious code in cagov-template-v5 (npm)
2 compromised versions
- Jan 21, 2024
Malicious code in froxlor (npm)
1 compromised version
- Jan 21, 2024
Malicious code in librct (npm)
6 compromised versions
- Jan 20, 2024
Malicious code in siif_components (npm)
3 compromised versions
- Jan 18, 2024
Malicious code in analyticstracker (npm)
1 compromised version
- Jan 18, 2024
Malicious code in oscompatible (npm)
- Jan 18, 2024
Malware in oscompatible
1 compromised version
- Jan 18, 2024
Malicious code in storefront_h5_sdk (npm)
3 compromised versions
- Jan 18, 2024
Malicious code in pd-ui-kit (npm)
9 compromised versions
- Jan 17, 2024
Malware in jupiter-emoji-old
1 compromised version
- Jan 17, 2024
Malicious code in uptime-bot (npm)
- Jan 17, 2024
Malicious code in discord.js-v12selfbot (npm)
- Jan 17, 2024
Malware in uptime-bot
1 compromised version
- Jan 17, 2024
Malware in discord.js-v12selfbot
1 compromised version
- Jan 17, 2024
Malicious code in naoi.js (npm)
4 compromised versions
- Jan 17, 2024
Malware in naoi.js
1 compromised version
- Jan 17, 2024
Malicious code in discordjs-selfbot-v33 (npm)
- Jan 17, 2024
Malicious code in discord.js-selfbot-vl3 (npm)
- Jan 17, 2024
Malicious code in discord.js-seifbot-v13 (npm)
- Jan 17, 2024
Malicious code in discord-selfbot-v13 (npm)
- Jan 17, 2024
Malware in discord-selfbot-v13
1 compromised version
- Jan 17, 2024
Malware in discord.js-seifbot-v13
1 compromised version
- Jan 17, 2024
Malware in discordjs-selfbot-v33
1 compromised version
- Jan 17, 2024
Malware in discord.js-selfbot-vl3
1 compromised version
- Jan 17, 2024
Malicious code in noleakdmall (npm)
- Jan 17, 2024
Malicious code in dmalldiscordfriends (npm)
- Jan 17, 2024
Malicious code in discord.js-selfbot-dmallfriends-v13 (npm)
- Jan 17, 2024
Malicious code in discord.js-dmall-friends (npm)
- Jan 17, 2024
Malware in discord.js-selfbot-dmallfriends-v13
1 compromised version
- Jan 17, 2024
Malware in dmalldiscordfriends
1 compromised version
- Jan 17, 2024
Malware in discord.js-dmall-friends
1 compromised version
- Jan 17, 2024
Malware in noleakdmall
1 compromised version
- Jan 17, 2024
Malicious code in uhqsniper (npm)
Page 6264 of 6,645