Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,218 total in npm · sorted newest first- Sep 25, 2023
Malware in bot-asuna-temp
1 compromised version
- Sep 25, 2023
Malware in lenskart
1 compromised version
- Sep 24, 2023
Malicious code in company_package_my (npm)
2 compromised versions
- Sep 24, 2023
Malicious code in spaceboo-y (npm)
1 compromised version
- Sep 22, 2023
Malicious code in @hnbi/searchfeuikit (npm)
1 compromised version
- Sep 22, 2023
Malicious code in @csmsce/msx-types (npm)
1 compromised version
- Sep 22, 2023
Malicious code in @ms-mwf/moray (npm)
1 compromised version
- Sep 22, 2023
Malicious code in @cosell/accountplan (npm)
2 compromised versions
- Sep 22, 2023
Malicious code in callhtm-p (npm)
2 compromised versions
- Sep 22, 2023
Malicious code in callhtmcall (npm)
1 compromised version
- Sep 22, 2023
Malicious code in lenskart (npm)
7 compromised versions
- Sep 22, 2023
Malicious code in rahad-remake-api (npm)
1 compromised version
- Sep 22, 2023
Malware in rahad-remake-api
1 compromised version
- Sep 22, 2023
Malicious code in circus-amd (npm)
1 compromised version
- Sep 21, 2023
Malicious code in amhairc-web (npm)
1 compromised version
- Sep 21, 2023
Malicious code in optimize-procurement-and-inventory-with-ai (npm)
2 compromised versions
- Sep 21, 2023
Malicious code in gatecrash (npm)
3 compromised versions
- Sep 21, 2023
Malicious code in @zettle-bo/dashboard (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/dashboard
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/customers (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/customers
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/shell (npm)
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/pp-profile-widget (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/pp-profile-widget
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/shell
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/react-router-dom (npm)
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/inventory (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/inventory
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/react-router-dom
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/routes (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/routes
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/react (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/react
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/capital (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/capital
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/vertical-navigation (npm)
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/products (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/products
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/vertical-navigation
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/sales-trends (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/sales-trends
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/direct-debit (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/direct-debit
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/bank-settings (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/bank-settings
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/receipts (npm)
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/cash-register (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/receipts
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/cash-register
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/invoices (npm)
1 compromised version
Page 6285 of 6,645