Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,238 total in npm · sorted newest first- Dec 18, 2023
Malicious code in discord.js-unofficial (npm)
- Dec 18, 2023
Malicious code in arrays-string (npm)
- Dec 18, 2023
Malware in discord.js-unofficial
1 compromised version
- Dec 18, 2023
Malware in arrays-string
1 compromised version
- Dec 16, 2023
Malicious code in app-next-example-plugin (npm)
2 compromised versions
- Dec 16, 2023
Malicious code in blingbling-dasda (npm)
1 compromised version
- Dec 15, 2023
Malicious code in fio-registrations (npm)
1 compromised version
- Dec 15, 2023
Malicious code in 2e6d5f64604be31 (npm)
- Dec 15, 2023
Malware in 2e6d5f64604be31
1 compromised version
- Dec 15, 2023
Malicious code in spectro-cloud-docs (npm)
3 compromised versions
- Dec 15, 2023
Malicious code in react-persian-calendar-date-picker222 (npm)
- Dec 15, 2023
Malware in react-persian-calendar-date-picker222
1 compromised version
- Dec 14, 2023
Malicious code in web3-core-subscription (npm)
- Dec 14, 2023
Malware in web3-core-subscription
1 compromised version
- Dec 14, 2023
Malicious code in primeng-layout (npm)
1 compromised version
- Dec 14, 2023
Malicious code in @ledgerhq/connect-kit (npm)
- Dec 14, 2023
Malware in @ledgerhq/connect-kit
1 compromised version
- Dec 14, 2023
Malicious code in twk-boilerplate-template (npm)
1 compromised version
- Dec 14, 2023
Malicious code in katal-sellercentralhmdsupport (npm)
1 compromised version
- Dec 14, 2023
Malicious code in css-hell (npm)
- Dec 14, 2023
Malware in css-hell
1 compromised version
- Dec 14, 2023
Malicious code in @gtfobar/pwn (npm)
16 compromised versions
- Dec 14, 2023
Malware in @gtfobar/pwn
1 compromised version
- Dec 13, 2023
Malicious code in @dle-multiform-angular-component/core (npm)
1 compromised version
- Dec 13, 2023
Malicious code in @dle-clo-bento-component/dist (npm)
1 compromised version
- Dec 12, 2023
Malicious code in npm_package_babel_plugins_3_1_pragma (npm)
1 compromised version
- Dec 12, 2023
Malicious code in blockchain-transactions (npm)
- Dec 12, 2023
Malware in blockchain-transactions
1 compromised version
- Dec 11, 2023
Malicious code in rechtspraak.insolventies (npm)
1 compromised version
- Dec 11, 2023
Malicious code in rechtspraak.namenlijst (npm)
1 compromised version
- Dec 11, 2023
Malicious code in npi.rechtspraaknl.web (npm)
1 compromised version
- Dec 11, 2023
Malicious code in blockchain-contracts (npm)
- Dec 11, 2023
Malware in blockchain-contracts
1 compromised version
- Dec 11, 2023
Malicious code in project-onesite (npm)
1 compromised version
- Dec 11, 2023
Malicious code in bynderweb (npm)
1 compromised version
- Dec 11, 2023
Malicious code in rechtspraak.huwelijksgoederenregister (npm)
1 compromised version
- Dec 11, 2023
Malicious code in rechtspraak.ccbr (npm)
1 compromised version
- Dec 11, 2023
Malware in shinchina
1 compromised version
- Dec 11, 2023
Malware in react-native-dual-pedometer
1 compromised version
- Dec 11, 2023
Malware in orchestrationdesk
1 compromised version
- Dec 10, 2023
Malicious code in shinchina (npm)
2 compromised versions
- Dec 9, 2023
Malicious code in react-native-dual-pedometer (npm)
2 compromised versions
- Dec 9, 2023
Malicious code in orchestrationdesk (npm)
2 compromised versions
- Dec 8, 2023
Malicious code in privalia-app (npm)
1 compromised version
- Dec 8, 2023
Malicious code in sentrybrowser (npm)
- Dec 8, 2023
Malware in sentrybrowser
1 compromised version
- Dec 8, 2023
Malicious code in details.app (npm)
1 compromised version
- Dec 7, 2023
Malicious code in multiversx-wallet (npm)
- Dec 7, 2023
Malware in multiversx-wallet
1 compromised version
- Dec 7, 2023
Malicious code in cronos-lib (npm)
Page 6271 of 6,645