Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,218 total in npm · sorted newest first- Sep 26, 2023
Malicious code in @ltd2research/tldrequest (npm)
3 compromised versions
- Sep 26, 2023
Malicious code in ktarco1 (npm)
- Sep 26, 2023
Malicious code in ktarco (npm)
- Sep 26, 2023
Malicious code in arcotest2 (npm)
- Sep 26, 2023
Malicious code in arcotest1 (npm)
- Sep 26, 2023
Malware in arcotest1
1 compromised version
- Sep 26, 2023
Malware in ktarco1
1 compromised version
- Sep 26, 2023
Malware in ktarco
1 compromised version
- Sep 26, 2023
Malware in arcotest2
1 compromised version
- Sep 26, 2023
Malicious code in @bootsantos/bootsantos (npm)
- Sep 26, 2023
Malware in @bootsantos/bootsantos
1 compromised version
- Sep 26, 2023
Malicious code in banglamart-module (npm)
- Sep 26, 2023
Malware in banglamart-module
1 compromised version
- Sep 26, 2023
Malicious code in fca-priyansh3 (npm)
- Sep 26, 2023
Malicious code in fca-priyansh1 (npm)
- Sep 26, 2023
Malware in fca-priyansh3
1 compromised version
- Sep 26, 2023
Malware in fca-priyansh1
1 compromised version
- Sep 26, 2023
Malicious code in thinh2001-api (npm)
- Sep 26, 2023
Malicious code in fbthinhdz-api (npm)
- Sep 26, 2023
Malware in thinh2001-api
1 compromised version
- Sep 26, 2023
Malware in fbthinhdz-api
1 compromised version
- Sep 26, 2023
Malicious code in fb-farebi-amir (npm)
- Sep 26, 2023
Malware in fb-farebi-amir
1 compromised version
- Sep 26, 2023
Malicious code in accounting-core (npm)
1 compromised version
- Sep 25, 2023
Malicious code in nequi-aws-kms (npm)
1 compromised version
- Sep 25, 2023
Malicious code in peekatchuysharnlesspackage (npm)
- Sep 25, 2023
Malicious code in peekatchuysharmlesspackage (npm)
- Sep 25, 2023
Malware in peekatchuysharmlesspackage
1 compromised version
- Sep 25, 2023
Malware in peekatchuysharnlesspackage
1 compromised version
- Sep 25, 2023
Malicious code in beta-fhr-nxt (npm)
- Sep 25, 2023
Malware in beta-fhr-nxt
1 compromised version
- Sep 25, 2023
Malicious code in gradient-async (npm)
- Sep 25, 2023
Malware in gradient-async
1 compromised version
- Sep 25, 2023
Malicious code in manhdzfca (npm)
- Sep 25, 2023
Malicious code in fca-rqzax-v3 (npm)
- Sep 25, 2023
Malicious code in fca-manhdz2004 (npm)
- Sep 25, 2023
Malware in manhdzfca
1 compromised version
- Sep 25, 2023
Malware in fca-rqzax-v3
1 compromised version
- Sep 25, 2023
Malware in fca-manhdz2004
1 compromised version
- Sep 25, 2023
Malicious code in fca-get (npm)
- Sep 25, 2023
Malicious code in fca-bot-asuna (npm)
- Sep 25, 2023
Malicious code in facebook-asuna-api (npm)
- Sep 25, 2023
Malicious code in chat-asuna-api (npm)
- Sep 25, 2023
Malicious code in chat-api-asuna (npm)
- Sep 25, 2023
Malicious code in bot-asuna-temp (npm)
- Sep 25, 2023
Malware in chat-asuna-api
1 compromised version
- Sep 25, 2023
Malware in fca-get
1 compromised version
- Sep 25, 2023
Malware in facebook-asuna-api
1 compromised version
- Sep 25, 2023
Malware in fca-bot-asuna
1 compromised version
- Sep 25, 2023
Malware in chat-api-asuna
1 compromised version
Page 6284 of 6,645