Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,238 total in npm · sorted newest first- Jan 3, 2024
Malicious code in airslate-core-components (npm)
- Jan 3, 2024
Malware in mw-common-components
1 compromised version
- Jan 3, 2024
Malware in metabase-enterprise
1 compromised version
- Jan 3, 2024
Malware in airslate-core-components
1 compromised version
- Jan 3, 2024
Malware in page-configs
1 compromised version
- Jan 3, 2024
Malware in airslate-navigation
1 compromised version
- Jan 3, 2024
Malware in sparxy
1 compromised version
- Jan 3, 2024
Malicious code in casino-prismic (npm)
2 compromised versions
- Jan 2, 2024
Malicious code in chancets (npm)
3 compromised versions
- Jan 2, 2024
Malware in discord.js-self-v22
1 compromised version
- Jan 2, 2024
Malicious code in yield-api-documentation (npm)
- Jan 2, 2024
Malicious code in matomo-looker-studio-connector (npm)
- Jan 2, 2024
Malicious code in matomo-for-wordpress (npm)
- Jan 2, 2024
Malicious code in get_name_of_token (npm)
- Jan 2, 2024
Malicious code in bsc-allowance (npm)
- Jan 2, 2024
Malware in matomo-for-wordpress
1 compromised version
- Jan 2, 2024
Malware in matomo-looker-studio-connector
1 compromised version
- Jan 2, 2024
Malware in get_name_of_token
1 compromised version
- Jan 2, 2024
Malware in bsc-allowance
1 compromised version
- Jan 2, 2024
Malware in yield-api-documentation
1 compromised version
- Jan 2, 2024
Malicious code in @skip-js/cookie-consent (npm)
1 compromised version
- Jan 2, 2024
Malicious code in @serenity-web/components-base (npm)
- Jan 2, 2024
Malicious code in @serenity-web/common-helpers (npm)
- Jan 2, 2024
Malicious code in @serenity-web/common-assets (npm)
- Jan 2, 2024
Malicious code in @serenity-web/channel-motor (npm)
- Jan 2, 2024
Malware in @serenity-web/channel-motor
1 compromised version
- Jan 2, 2024
Malware in @serenity-web/common-helpers
1 compromised version
- Jan 2, 2024
Malware in @serenity-web/components-base
1 compromised version
- Jan 2, 2024
Malware in @serenity-web/common-assets
1 compromised version
- Jan 2, 2024
Malicious code in @msmg-money/vue-datadog (npm)
2 compromised versions
- Jan 2, 2024
Malware in @msmg-money/vue-datadog
1 compromised version
- Jan 2, 2024
Malicious code in @msmg-money/get-current-env (npm)
2 compromised versions
- Jan 2, 2024
Malware in @msmg-money/get-current-env
1 compromised version
- Jan 2, 2024
Malicious code in @authentication-pages/vue-cli-prebuild (npm)
- Jan 2, 2024
Malware in @authentication-pages/vue-cli-prebuild
1 compromised version
- Jan 2, 2024
Malicious code in obiz (npm)
- Jan 2, 2024
Malware in unit-testing-controllers
1 compromised version
- Jan 2, 2024
Malware in obiz
1 compromised version
- Jan 1, 2024
Malicious code in @cartus-core/cartus-common-ui2 (npm)
2 compromised versions
- Jan 1, 2024
Malicious code in new-pro-anu (npm)
5 compromised versions
- Jan 1, 2024
Malicious code in hubl-parser (npm)
1 compromised version
- Jan 1, 2024
Malicious code in @cartus-core/cartus-common-ui (npm)
11 compromised versions
- Jan 1, 2024
Malicious code in squaredev-next-online-payments-example (npm)
1 compromised version
- Dec 31, 2023
Malicious code in ngx-ndbx (npm)
2 compromised versions
- Dec 31, 2023
Malicious code in sparxy (npm)
2 compromised versions
- Dec 30, 2023
Malicious code in discord.js-self-v22 (npm)
1 compromised version
- Dec 30, 2023
Malicious code in unit-testing-controllers (npm)
1 compromised version
- Dec 29, 2023
Malicious code in @chainxxx/act-utils (npm)
- Dec 29, 2023
Malware in @chainxxx/act-utils
1 compromised version
- Dec 29, 2023
Malicious code in chain00x (npm)
Page 6268 of 6,645