Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,218 total in npm · sorted newest first- Sep 18, 2023
Malware in thinhdz2001-api
1 compromised version
- Sep 18, 2023
Malware in fca-nvt
1 compromised version
- Sep 18, 2023
Malware in master-vanthinh
1 compromised version
- Sep 18, 2023
Malicious code in fca_kaizen (npm)
1 compromised version
- Sep 18, 2023
Malicious code in fca-reygie-harizon (npm)
1 compromised version
- Sep 18, 2023
Malicious code in fca-giee-harizon (npm)
1 compromised version
- Sep 18, 2023
Malware in fca_kaizen
1 compromised version
- Sep 18, 2023
Malware in fca-giee-harizon
1 compromised version
- Sep 18, 2023
Malware in fca-reygie-harizon
1 compromised version
- Sep 18, 2023
Malicious code in @abdullarahaman/fca-arya-api (npm)
- Sep 18, 2023
Malware in @abdullarahaman/fca-arya-api
1 compromised version
- Sep 18, 2023
Malicious code in truffle-gas-report (npm)
- Sep 18, 2023
Malicious code in rodashe (npm)
- Sep 18, 2023
Malicious code in loudashe (npm)
- Sep 18, 2023
Malicious code in lodarshe (npm)
- Sep 18, 2023
Malicious code in hardhat-gas-tracer (npm)
- Sep 18, 2023
Malicious code in hardhat-gas-report (npm)
- Sep 18, 2023
Malicious code in hardhat-contract-size (npm)
- Sep 18, 2023
Malicious code in hadhat-contract-sizer (npm)
- Sep 18, 2023
Malicious code in etheres.js (npm)
- Sep 18, 2023
Malicious code in eterscan-api (npm)
- Sep 18, 2023
Malicious code in eters.js (npm)
- Sep 18, 2023
Malicious code in eteres (npm)
- Sep 18, 2023
Malware in eters.js
1 compromised version
- Sep 18, 2023
Malware in loudashe
1 compromised version
- Sep 18, 2023
Malware in rodashe
1 compromised version
- Sep 18, 2023
Malware in hardhat-contract-size
1 compromised version
- Sep 18, 2023
Malware in truffle-gas-report
1 compromised version
- Sep 18, 2023
Malware in hardhat-gas-report
1 compromised version
- Sep 18, 2023
Malware in etheres.js
1 compromised version
- Sep 18, 2023
Malware in eterscan-api
1 compromised version
- Sep 18, 2023
Malware in hardhat-gas-tracer
1 compromised version
- Sep 18, 2023
Malware in lodarshe
1 compromised version
- Sep 18, 2023
Malware in hadhat-contract-sizer
1 compromised version
- Sep 18, 2023
Malware in eteres
1 compromised version
- Sep 18, 2023
Malware in developer-scaffold-full-width-wrapper
1 compromised version
- Sep 18, 2023
Malware in centurylink
1 compromised version
- Sep 18, 2023
Malware in walletconnect-website
1 compromised version
- Sep 18, 2023
Malware in subspace-relayer-front-end
1 compromised version
- Sep 18, 2023
Malware in pathkit-local
1 compromised version
- Sep 18, 2023
Malicious code in symbl_ai (npm)
- Sep 18, 2023
Malware in surf-sharekit-frontend
1 compromised version
- Sep 18, 2023
Malware in adidas-data-mesh
1 compromised version
- Sep 18, 2023
Malware in symbl_ai
1 compromised version
- Sep 18, 2023
Malware in inteken-app-client
1 compromised version
- Sep 18, 2023
Malware in producer-journey
1 compromised version
- Sep 18, 2023
Malware in send-orchestrator-event-lambda
1 compromised version
- Sep 18, 2023
Malicious code in test-archive (npm)
33 compromised versions
- Sep 18, 2023
Malware in test-archive
1 compromised version
- Sep 18, 2023
Malicious code in telia-front-react (npm)
2 compromised versions
Page 6288 of 6,645