Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,238 total in npm · sorted newest first- Oct 16, 2023
Malicious code in fca-kemdino (npm)
- Oct 16, 2023
Malicious code in fca-kemdev (npm)
- Oct 16, 2023
Malicious code in data-kempremium (npm)
- Oct 16, 2023
Malware in fca-kemdev
1 compromised version
- Oct 16, 2023
Malware in fca-kemdino
1 compromised version
- Oct 16, 2023
Malware in kempremium-dev
1 compromised version
- Oct 16, 2023
Malware in data-kempremium
1 compromised version
- Oct 15, 2023
Malicious code in xsolla-login-js-sdk (npm)
1 compromised version
- Oct 15, 2023
Malicious code in xsolla-paystation-widget (npm)
2 compromised versions
- Oct 15, 2023
Malicious code in detoo (npm)
1 compromised version
- Oct 13, 2023
Malicious code in by-helpers (npm)
2 compromised versions
- Oct 13, 2023
Malicious code in @bitsoex/react-design-system (npm)
2 compromised versions
- Oct 13, 2023
Malicious code in tfb-cip-app (npm)
1 compromised version
- Oct 13, 2023
Malicious code in @momo-miniapp/apix (npm)
- Oct 13, 2023
Malicious code in @momo-miniapp/api (npm)
- Oct 13, 2023
Malware in @momo-miniapp/api
1 compromised version
- Oct 13, 2023
Malware in @momo-miniapp/apix
1 compromised version
- Oct 13, 2023
Malicious code in @homelte_dev/frontend (npm)
- Oct 13, 2023
Malware in @homelte_dev/frontend
1 compromised version
- Oct 13, 2023
Malicious code in onno-missing-2023-full-movies-at-home-streamnig (npm)
- Oct 13, 2023
Malware in onno-missing-2023-full-movies-at-home-streamnig
1 compromised version
- MAL-2023-8333Malwarenpm@dsr-rollback-org-hover-owled-agios-situs/dsr-rollback-package-hover-owled-agios-situsOct 12, 2023
Malicious code in @dsr-rollback-org-hover-owled-agios-situs/dsr-rollback-package-hover-owled-agios-situs (npm)
- GHSA-rw29-m4rr-pc8fMalwarenpm@dsr-rollback-org-hover-owled-agios-situs/dsr-rollback-package-hover-owled-agios-situsOct 12, 2023
Malware in @dsr-rollback-org-hover-owled-agios-situs/dsr-rollback-package-hover-owled-agios-situs
1 compromised version
- Oct 12, 2023
Malicious code in situs-slot-gacor-slot-online-resmi-terbaik-mudah-menang-dan-maxwin-2023 (npm)
- GHSA-269j-2jm7-8jg5Malwarenpmsitus-slot-gacor-slot-online-resmi-terbaik-mudah-menang-dan-maxwin-2023Oct 12, 2023
Malware in situs-slot-gacor-slot-online-resmi-terbaik-mudah-menang-dan-maxwin-2023
1 compromised version
- Oct 12, 2023
Malicious code in slot-qris-situs-slot-mudah-maxwin-24-jam-online-terpercaya (npm)
- Oct 12, 2023
Malicious code in situs-slot-kakek-petir-slot-zeus-pragmaticplay-gampang-menang (npm)
- Oct 12, 2023
Malicious code in situs-slot-gacor-pragmatic-play-dijamin-menang-tahun-2023 (npm)
- Oct 12, 2023
Malicious code in situs-bocoran-rtp-live-bocoran-agen-judi-rtp-slot-hari-ini-terpercaya (npm)
- Oct 12, 2023
Malicious code in situs-bandar-togel-hadiah-4d-10-juta-terpercaya-hk-sgp-sdy (npm)
- Oct 12, 2023
Malicious code in pragmaticplay-situs-slot-online-banyak-hoki-paling-terpercaya (npm)
- Oct 12, 2023
Malicious code in daftar-situs-judi-slot-online-gacor-gampang-menang-2023 (npm)
- Oct 12, 2023
Malicious code in daftar-10-bandar-togel-singapore-terpercaya-agen-pay4d-terbesar-di-asia (npm)
- Oct 12, 2023
Malicious code in agen-sbobet-judi-bola-online-terpercaya-paling-lengkap (npm)
- Oct 12, 2023
Malware in slot-qris-situs-slot-mudah-maxwin-24-jam-online-terpercaya
1 compromised version
- Oct 12, 2023
Malware in situs-slot-gacor-pragmatic-play-dijamin-menang-tahun-2023
1 compromised version
- Oct 12, 2023
Malware in agen-sbobet-judi-bola-online-terpercaya-paling-lengkap
1 compromised version
- Oct 12, 2023
Malware in pragmaticplay-situs-slot-online-banyak-hoki-paling-terpercaya
1 compromised version
- GHSA-fqg5-f39f-246xMalwarenpmdaftar-10-bandar-togel-singapore-terpercaya-agen-pay4d-terbesar-di-asiaOct 12, 2023
Malware in daftar-10-bandar-togel-singapore-terpercaya-agen-pay4d-terbesar-di-asia
1 compromised version
- Oct 12, 2023
Malware in situs-slot-kakek-petir-slot-zeus-pragmaticplay-gampang-menang
1 compromised version
- Oct 12, 2023
Malware in situs-bocoran-rtp-live-bocoran-agen-judi-rtp-slot-hari-ini-terpercaya
1 compromised version
- Oct 12, 2023
Malware in situs-bandar-togel-hadiah-4d-10-juta-terpercaya-hk-sgp-sdy
1 compromised version
- Oct 12, 2023
Malware in daftar-situs-judi-slot-online-gacor-gampang-menang-2023
1 compromised version
- Oct 12, 2023
Malicious code in saml-mock-idp (npm)
1 compromised version
- Oct 12, 2023
Malicious code in microsoft-ux (npm)
1 compromised version
- Oct 12, 2023
Malicious code in so-loader-helper (npm)
- Oct 12, 2023
Malicious code in n-sandbox (npm)
- Oct 12, 2023
Malware in n-sandbox
1 compromised version
- Oct 12, 2023
Malware in so-loader-helper
1 compromised version
- Oct 12, 2023
Malicious code in fca-emon-bhai-api (npm)
Page 6281 of 6,645