Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,218 total in npm · sorted newest first- Sep 19, 2023
Malware in fca-dongdz2006
1 compromised version
- Sep 19, 2023
Malware in paypal-validators
1 compromised version
- Sep 19, 2023
Malicious code in @klapp-settlement/store (npm)
- Sep 19, 2023
Malware in @klapp-settlement/store
1 compromised version
- Sep 19, 2023
Malicious code in synth-fhr-db (npm)
- Sep 19, 2023
Malicious code in jake-horizon (npm)
16 compromised versions
- Sep 19, 2023
Malicious code in beta-fhr (npm)
3 compromised versions
- Sep 19, 2023
Malware in beta-fhr
1 compromised version
- Sep 19, 2023
Malware in jake-horizon
1 compromised version
- Sep 19, 2023
Malware in synth-fhr-db
1 compromised version
- Sep 19, 2023
Malicious code in fca-jordan (npm)
- Sep 19, 2023
Malicious code in fca-chana (npm)
- Sep 19, 2023
Malicious code in fb-chat-api-temp (npm)
- Sep 19, 2023
Malicious code in chand-trick (npm)
- Sep 19, 2023
Malware in chand-trick
1 compromised version
- Sep 19, 2023
Malware in fca-jordan
1 compromised version
- Sep 19, 2023
Malware in fb-chat-api-temp
1 compromised version
- Sep 19, 2023
Malware in fca-chana
1 compromised version
- Sep 19, 2023
Malicious code in fca-cat-api (npm)
- Sep 19, 2023
Malicious code in fca-abdulla-api (npm)
- Sep 19, 2023
Malware in fca-abdulla-api
1 compromised version
- Sep 19, 2023
Malware in fca-cat-api
1 compromised version
- Sep 19, 2023
Malicious code in @cat-abdulla/fca-abdulla-api (npm)
- Sep 19, 2023
Malware in @cat-abdulla/fca-abdulla-api
1 compromised version
- Sep 18, 2023
Malicious code in pmd-github-action (npm)
4 compromised versions
- Sep 18, 2023
Malicious code in not-a-math (npm)
1 compromised version
- Sep 18, 2023
Malicious code in @apps-common/ui-theme (npm)
1 compromised version
- Sep 18, 2023
Malicious code in thinhdz2001-fb (npm)
- Sep 18, 2023
Malicious code in thinhdz2001-api (npm)
- Sep 18, 2023
Malicious code in thinhdz-fb (npm)
- Sep 18, 2023
Malicious code in thinhdz-chat-api (npm)
- Sep 18, 2023
Malicious code in thinhdz-api (npm)
- Sep 18, 2023
Malicious code in nvthinhdz-api (npm)
- Sep 18, 2023
Malicious code in nvthinh2001-api (npm)
- Sep 18, 2023
Malicious code in nvt2001-api (npm)
- Sep 18, 2023
Malicious code in master-vanthinh (npm)
- Sep 18, 2023
Malicious code in helyt (npm)
- Sep 18, 2023
Malicious code in fce-vanthinh (npm)
- Sep 18, 2023
Malicious code in fca-nvt (npm)
- Sep 18, 2023
Malicious code in fca-bucu (npm)
- Sep 18, 2023
Malware in fca-bucu
1 compromised version
- Sep 18, 2023
Malware in nvthinh2001-api
1 compromised version
- Sep 18, 2023
Malware in thinhdz2001-fb
1 compromised version
- Sep 18, 2023
Malware in nvthinhdz-api
1 compromised version
- Sep 18, 2023
Malware in thinhdz-chat-api
1 compromised version
- Sep 18, 2023
Malware in helyt
1 compromised version
- Sep 18, 2023
Malware in thinhdz-fb
1 compromised version
- Sep 18, 2023
Malware in fce-vanthinh
1 compromised version
- Sep 18, 2023
Malware in thinhdz-api
1 compromised version
- Sep 18, 2023
Malware in nvt2001-api
1 compromised version
Page 6287 of 6,645