Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,238 total in npm · sorted newest first- Nov 24, 2023
Malicious code in docusaurus-plugin-matamohnhb (npm)
- Nov 24, 2023
Malware in ory-config
1 compromised version
- Nov 24, 2023
Malware in docusaurus-plugin-matamohnhb
1 compromised version
- Nov 24, 2023
Malicious code in docusaurus-plugin-matamoh (npm)
1 compromised version
- Nov 24, 2023
Malware in otnet-ory-network-tests
1 compromised version
- Nov 24, 2023
Malware in kratos-nextjs-react-example
1 compromised version
- Nov 24, 2023
Malware in build-buf-action
1 compromised version
- Nov 24, 2023
Malware in ory-demo
1 compromised version
- Nov 24, 2023
Malware in docusaurus-plugin-matamoh
1 compromised version
- Nov 24, 2023
Malicious code in wehackrepos (npm)
1 compromised version
- Nov 24, 2023
Malware in wehackreposss
1 compromised version
- Nov 24, 2023
Malware in wehackrepos
1 compromised version
- Nov 24, 2023
Malicious code in discord-bottt (npm)
1 compromised version
- Nov 24, 2023
Malware in discord-bottt
1 compromised version
- Nov 23, 2023
Malicious code in grunt-ac-toolkit (npm)
1 compromised version
- Nov 23, 2023
Malicious code in todo-backend (npm)
- Nov 23, 2023
Malicious code in sofa1-shop (npm)
4 compromised versions
- Nov 23, 2023
Malicious code in serverless-provisioned-memory-report (npm)
- Nov 23, 2023
Malicious code in re_rank_demo (npm)
- Nov 23, 2023
Malicious code in purchase (npm)
- Nov 23, 2023
Malicious code in npm-base-template (npm)
- Nov 23, 2023
Malicious code in immutable-seaport (npm)
- Nov 23, 2023
Malicious code in eslint-plugin-discord (npm)
- Nov 23, 2023
Malicious code in arubawebappbackend (npm)
- Nov 23, 2023
Malicious code in areweplayingyet (npm)
- Nov 23, 2023
Malware in npm-base-template
1 compromised version
- Nov 23, 2023
Malware in arubawebappbackend
1 compromised version
- Nov 23, 2023
Malware in immutable-seaport
1 compromised version
- Nov 23, 2023
Malware in serverless-provisioned-memory-report
1 compromised version
- Nov 23, 2023
Malware in todo-backend
1 compromised version
- Nov 23, 2023
Malware in purchase
1 compromised version
- Nov 23, 2023
Malware in re_rank_demo
1 compromised version
- Nov 23, 2023
Malware in areweplayingyet
1 compromised version
- Nov 23, 2023
Malware in eslint-plugin-discord
1 compromised version
- Nov 23, 2023
Malware in sofa1-shop
1 compromised version
- Nov 23, 2023
Malicious code in starling-api-web-starter-kit (npm)
- Nov 23, 2023
Malicious code in nextcapital-client-demo (npm)
- Nov 23, 2023
Malicious code in mpesa_listener (npm)
- Nov 23, 2023
Malware in starling-api-web-starter-kit
1 compromised version
- Nov 23, 2023
Malware in mpesa_listener
1 compromised version
- Nov 23, 2023
Malware in nextcapital-client-demo
1 compromised version
- Nov 22, 2023
Malicious code in discord.js-ytsong (npm)
1 compromised version
- Nov 21, 2023
Malicious code in pod-financier-app (npm)
2 compromised versions
- Nov 21, 2023
Malicious code in primarycare (npm)
1 compromised version
- Nov 21, 2023
Malicious code in ory-config (npm)
1 compromised version
- Nov 21, 2023
Malicious code in build-buf-action (npm)
1 compromised version
- Nov 21, 2023
Malicious code in otnet-ory-network-tests (npm)
1 compromised version
- Nov 21, 2023
Malicious code in kratos-nextjs-react-example (npm)
1 compromised version
- Nov 21, 2023
Malicious code in basegulpfile (npm)
1 compromised version
- Nov 21, 2023
Malicious code in ory-demo (npm)
2 compromised versions
Page 6274 of 6,645