Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,238 total in npm · sorted newest first- Jan 10, 2024
Malware in @monokera/react-components-storybook
1 compromised version
- Jan 10, 2024
Malware in axis-common-lib
1 compromised version
- Jan 10, 2024
Malicious code in webrtc-studio-connection (npm)
1 compromised version
- Jan 10, 2024
Malware in webrtc-studio-connection
1 compromised version
- Jan 10, 2024
Malware in d5-es6-sass-boilerplate
1 compromised version
- Jan 10, 2024
Malware in holamessironaldo
1 compromised version
- Jan 10, 2024
Malicious code in @jitoz/encrypted-tools (npm)
- Jan 10, 2024
Malware in @jitoz/encrypted-tools
1 compromised version
- Jan 10, 2024
Malicious code in @linesearch/swiper (npm)
- Jan 10, 2024
Malware in @linesearch/swiper
1 compromised version
- Jan 9, 2024
Malicious code in sourcify-ui (npm)
1 compromised version
- Jan 9, 2024
Malicious code in onetake (npm)
2 compromised versions
- Jan 8, 2024
Malicious code in demo-store (npm)
1 compromised version
- Jan 8, 2024
Malicious code in optimistic-cart-ui (npm)
1 compromised version
- Jan 8, 2024
Malicious code in vg-bot (npm)
2 compromised versions
- Jan 8, 2024
Malicious code in essentialist-gallery-block-cgb-guten-block (npm)
1 compromised version
- Jan 8, 2024
Malicious code in j5-test (npm)
1 compromised version
- Jan 7, 2024
Malicious code in ember-cli-progress-ci (npm)
1 compromised version
- Jan 7, 2024
Malicious code in dont-install-me-1 (npm)
1 compromised version
- Jan 7, 2024
Malicious code in dont-install-me0 (npm)
1 compromised version
- Jan 7, 2024
Malicious code in replit-extensions-react (npm)
1 compromised version
- Jan 7, 2024
Malicious code in dynatrace-oneagent-nodejs (npm)
1 compromised version
- Jan 7, 2024
Malicious code in akshansh-jaiswal-ctf-security (npm)
5 compromised versions
- Jan 7, 2024
Malicious code in noblox.js-oauth (npm)
1 compromised version
- Jan 7, 2024
Malicious code in noblox.js-servers (npm)
4 compromised versions
- Jan 6, 2024
Malicious code in error-can-not-resolve-resource (npm)
1 compromised version
- Jan 6, 2024
Malicious code in deep-search-exports-directory (npm)
1 compromised version
- Jan 6, 2024
Malicious code in bakery-dashboard (npm)
1 compromised version
- Jan 6, 2024
Malicious code in raspeditor (npm)
1 compromised version
- Jan 6, 2024
Malicious code in cloudflare-docs-theme (npm)
2 compromised versions
- Jan 6, 2024
Malicious code in shopify-netsuite-connector (npm)
5 compromised versions
- Jan 6, 2024
Malicious code in schedules-oauth-itwin (npm)
1 compromised version
- Jan 5, 2024
Malicious code in @monokera/react-components-storybook (npm)
1 compromised version
- Jan 5, 2024
Malicious code in axis-common-lib (npm)
1 compromised version
- Jan 5, 2024
Malicious code in holamessironaldo (npm)
1 compromised version
- Jan 5, 2024
Malicious code in d5-es6-sass-boilerplate (npm)
2 compromised versions
- Jan 5, 2024
Malicious code in paytm-common-components (npm)
1 compromised version
- Jan 5, 2024
Malicious code in kodiak2k (npm)
- Jan 5, 2024
Malware in kodiak2k
1 compromised version
- Jan 4, 2024
Malicious code in axelhowe (npm)
1 compromised version
- Jan 4, 2024
Malicious code in ether-sdk (npm)
3 compromised versions
- Jan 4, 2024
Malware in ether-sdk
1 compromised version
- Jan 3, 2024
Malicious code in snapfish (npm)
1 compromised version
- Jan 3, 2024
Malicious code in stupidrara (npm)
3 compromised versions
- Jan 3, 2024
Malicious code in warbeast2000 (npm)
- Jan 3, 2024
Malware in warbeast2000
1 compromised version
- Jan 3, 2024
Malicious code in page-configs (npm)
- Jan 3, 2024
Malicious code in mw-common-components (npm)
- Jan 3, 2024
Malicious code in metabase-enterprise (npm)
- Jan 3, 2024
Malicious code in airslate-navigation (npm)
Page 6267 of 6,645