Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,218 total in npm · sorted newest first- Sep 18, 2023
Malicious code in telia-common-component (npm)
2 compromised versions
- Sep 18, 2023
Malware in telia-common-component
1 compromised version
- Sep 18, 2023
Malware in telia-front-react
1 compromised version
- Sep 17, 2023
Malicious code in centurylink (npm)
11 compromised versions
- Sep 17, 2023
Malicious code in @healthbridge-design-system/components (npm)
1 compromised version
- Sep 17, 2023
Malicious code in walletconnect-website (npm)
5 compromised versions
- Sep 17, 2023
Malicious code in subspace-relayer-front-end (npm)
4 compromised versions
- Sep 16, 2023
Malicious code in mfp-test-repo (npm)
1 compromised version
- Sep 16, 2023
Malicious code in mfp-food-diary (npm)
2 compromised versions
- Sep 16, 2023
Malicious code in pathkit-local (npm)
1 compromised version
- Sep 16, 2023
Malicious code in puppeteer-example (npm)
12 compromised versions
- Sep 16, 2023
Malicious code in developer-scaffold-full-width-wrapper (npm)
6 compromised versions
- Sep 16, 2023
Malicious code in producer-journey (npm)
3 compromised versions
- Sep 16, 2023
Malicious code in send-orchestrator-event-lambda (npm)
1 compromised version
- Sep 16, 2023
Malicious code in adidas-data-mesh (npm)
11 compromised versions
- Sep 16, 2023
Malicious code in inteken-app-client (npm)
4 compromised versions
- Sep 16, 2023
Malicious code in surf-sharekit-frontend (npm)
3 compromised versions
- Sep 16, 2023
Malicious code in jerry1319 (npm)
1 compromised version
- Sep 15, 2023
Malicious code in payment-react-component (npm)
1 compromised version
- Sep 15, 2023
Malicious code in paypal-validators (npm)
1 compromised version
- Sep 14, 2023
Malicious code in sharinj-test (npm)
1 compromised version
- Sep 14, 2023
Malicious code in tv-front (npm)
1 compromised version
- Sep 14, 2023
Malicious code in ppreact7 (npm)
1 compromised version
- Sep 14, 2023
Malware in brum-global-variable
1 compromised version
- Sep 14, 2023
Malicious code in fca-dongsexx (npm)
- Sep 14, 2023
Malware in fca-dongsexx
1 compromised version
- Sep 14, 2023
Malicious code in purplebricks-frontend-core (npm)
- Sep 14, 2023
Malware in purplebricks-frontend-core
1 compromised version
- Sep 14, 2023
Malware in smeeh-administration
1 compromised version
- Sep 14, 2023
Malware in purplebricks-administration
1 compromised version
- Sep 13, 2023
Malicious code in healthbridge-design-system (npm)
1 compromised version
- Sep 13, 2023
Malicious code in brum-global-variable (npm)
1 compromised version
- Sep 13, 2023
Malicious code in smeeh-administration (npm)
1 compromised version
- Sep 13, 2023
Malicious code in purplebricks-administration (npm)
1 compromised version
- Sep 12, 2023
Malicious code in shein-test (npm)
- Sep 12, 2023
Malicious code in cloud-message-sdks (npm)
- Sep 12, 2023
Malware in shein-test
1 compromised version
- Sep 12, 2023
Malware in cloud-message-sdks
1 compromised version
- Sep 12, 2023
Malicious code in pretty-array (npm)
1 compromised version
- Sep 12, 2023
Malware in pretty-array
1 compromised version
- Sep 12, 2023
Malicious code in xweb_3.0_util_lib (npm)
- Sep 12, 2023
Malicious code in xweb_3.0_rootlib (npm)
- Sep 12, 2023
Malicious code in xweb_3.0_component_lib (npm)
- Sep 12, 2023
Malware in xweb_3.0_util_lib
1 compromised version
- Sep 12, 2023
Malware in xweb_3.0_rootlib
1 compromised version
- Sep 12, 2023
Malware in xweb_3.0_component_lib
1 compromised version
- Sep 12, 2023
Malicious code in antdesignpro2021 (npm)
- Sep 12, 2023
Malware in antdesignpro2021
1 compromised version
- Sep 12, 2023
Malicious code in react-morning (npm)
- Sep 12, 2023
Malware in react-morning
1 compromised version
Page 6289 of 6,645