Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,238 total in npm · sorted newest first- Nov 6, 2023
Malware in fa-icdc-form-api-bdt
1 compromised version
- Nov 6, 2023
Malicious code in redux-modal-dispatcher (npm)
1 compromised version
- Nov 6, 2023
Malicious code in airslate-static.icons (npm)
1 compromised version
- Nov 6, 2023
Malicious code in airslate-static (npm)
1 compromised version
- Nov 6, 2023
Malware in redux-modal-dispatcher
1 compromised version
- Nov 6, 2023
Malware in airslate-static.icons
1 compromised version
- Nov 6, 2023
Malware in airslate-static
1 compromised version
- Nov 6, 2023
Malicious code in airslate-image-uploader (npm)
1 compromised version
- Nov 6, 2023
Malicious code in airslate-error-handling-page (npm)
1 compromised version
- Nov 6, 2023
Malicious code in airslate-controls (npm)
1 compromised version
- Nov 6, 2023
Malicious code in airslate-api-client (npm)
1 compromised version
- Nov 6, 2023
Malware in airslate-error-handling-page
1 compromised version
- Nov 6, 2023
Malware in airslate-api-client
1 compromised version
- Nov 6, 2023
Malware in airslate-controls
1 compromised version
- Nov 6, 2023
Malware in airslate-image-uploader
1 compromised version
- Nov 6, 2023
Malicious code in test-pocbb (npm)
5 compromised versions
- Nov 6, 2023
Malware in test-pocbb
1 compromised version
- Nov 6, 2023
Malware in sparkonto-plus-external-web-app
1 compromised version
- Nov 6, 2023
Malicious code in exnessimo (npm)
1 compromised version
- Nov 6, 2023
Malware in exnessimo
1 compromised version
- Nov 6, 2023
Malware in astar-portal
1 compromised version
- Nov 6, 2023
Malware in counterstake-bridge
1 compromised version
- Nov 6, 2023
Malware in bonded-stablecoin
1 compromised version
- Nov 6, 2023
Malware in hydradx-ui
1 compromised version
- Nov 6, 2023
Malware in test262-runner
1 compromised version
- Nov 6, 2023
Malware in eslint-plugin-blade
1 compromised version
- Nov 5, 2023
Malicious code in mux-spaces-broadcast-layouts (npm)
1 compromised version
- Nov 5, 2023
Malicious code in mux-meet-nextjs (npm)
1 compromised version
- Nov 5, 2023
Malicious code in xsollacommercesdk (npm)
1 compromised version
- Nov 5, 2023
Malicious code in jotform-webhook-test (npm)
1 compromised version
- Nov 5, 2023
Malicious code in ch-frontend-assignment (npm)
1 compromised version
- Nov 5, 2023
Malicious code in onsurity-onboarding (npm)
1 compromised version
- Nov 5, 2023
Malicious code in stripe-terminal-react-native-dev-app (npm)
1 compromised version
- Nov 5, 2023
Malicious code in symphony-vega (npm)
1 compromised version
- Nov 5, 2023
Malicious code in gatsby-starter-gitlab (npm)
1 compromised version
- Nov 5, 2023
Malicious code in tvaultuiv2 (npm)
1 compromised version
- Nov 5, 2023
Malicious code in qlkube-client (npm)
1 compromised version
- Nov 5, 2023
Malicious code in symphony-list (npm)
1 compromised version
- Nov 4, 2023
Malicious code in watchman-search-ui (npm)
1 compromised version
- Nov 4, 2023
Malicious code in xterm-addon-clipboard (npm)
4 compromised versions
- Nov 3, 2023
Malicious code in sfdc-pie-chart (npm)
1 compromised version
- Nov 2, 2023
Malicious code in atmos-design-system (npm)
2 compromised versions
- Nov 2, 2023
Malicious code in @olxui/core (npm)
1 compromised version
- Nov 2, 2023
Malicious code in bistrosk (npm)
2 compromised versions
- Nov 2, 2023
Malicious code in astar-portal (npm)
2 compromised versions
- Nov 2, 2023
Malicious code in counterstake-bridge (npm)
2 compromised versions
- Nov 1, 2023
Malicious code in oathkeeper (npm)
2 compromised versions
- Nov 1, 2023
Malicious code in ironfish-rust-nodejs (npm)
3 compromised versions
- Nov 1, 2023
Malicious code in demo-saas (npm)
1 compromised version
- Nov 1, 2023
Malicious code in transaction-decoder (npm)
4 compromised versions
Page 6279 of 6,645