Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,218 total in npm · sorted newest first- Sep 12, 2023
Malware in npm-random-gen
1 compromised version
- Sep 11, 2023
Malicious code in @get-bridge/tapestry-sdk (npm)
1 compromised version
- Sep 11, 2023
Malicious code in @get-bridge/bridge-string-utils (npm)
1 compromised version
- Sep 11, 2023
Malicious code in solidity-tracer (npm)
- Sep 11, 2023
Malware in solidity-tracer
1 compromised version
- Sep 11, 2023
Malicious code in web3-react-core (npm)
- Sep 11, 2023
Malicious code in portal-env (npm)
- Sep 11, 2023
Malicious code in limitd-protocol (npm)
- Sep 11, 2023
Malicious code in compound-components (npm)
- Sep 11, 2023
Malware in portal-env
1 compromised version
- Sep 11, 2023
Malware in compound-components
1 compromised version
- Sep 11, 2023
Malware in limitd-protocol
1 compromised version
- Sep 11, 2023
Malware in web3-react-core
1 compromised version
- Sep 11, 2023
Malicious code in testingsomethingforscanner (npm)
- Sep 11, 2023
Malicious code in newtesttocheckscanner (npm)
- Sep 11, 2023
Malware in testingsomethingforscanner
1 compromised version
- Sep 11, 2023
Malware in newtesttocheckscanner
1 compromised version
- Sep 11, 2023
Malicious code in discord.js-selfv20 (npm)
- Sep 11, 2023
Malware in discord.js-selfv20
1 compromised version
- Sep 11, 2023
Malicious code in web3tool-validator (npm)
- Sep 11, 2023
Malicious code in web3tool-providers-ws (npm)
- Sep 11, 2023
Malicious code in web3tool-providers-http (npm)
- Sep 11, 2023
Malicious code in web3tool-eth-personal (npm)
- Sep 11, 2023
Malicious code in web3tool-eth-ens (npm)
- Sep 11, 2023
Malicious code in web3tool-eth-accounts (npm)
- Sep 11, 2023
Malicious code in web3tool-eth (npm)
- Sep 11, 2023
Malicious code in web3tool-core (npm)
- Sep 11, 2023
Malicious code in eth-web3-tx (npm)
- Sep 11, 2023
Malware in web3tool-core
1 compromised version
- Sep 11, 2023
Malware in web3tool-eth-personal
1 compromised version
- Sep 11, 2023
Malware in web3tool-providers-ws
1 compromised version
- Sep 11, 2023
Malware in web3tool-eth
1 compromised version
- Sep 11, 2023
Malware in web3tool-providers-http
1 compromised version
- Sep 11, 2023
Malware in web3tool-eth-ens
1 compromised version
- Sep 11, 2023
Malware in web3tool-validator
1 compromised version
- Sep 11, 2023
Malware in eth-web3-tx
1 compromised version
- Sep 11, 2023
Malware in web3tool-eth-accounts
1 compromised version
- Sep 11, 2023
Malicious code in @huoshanjiebai/curvess (npm)
- Sep 11, 2023
Malware in @huoshanjiebai/curvess
1 compromised version
- Sep 11, 2023
Malicious code in @huoshanjiebai/ethereumjs-utill (npm)
- Sep 11, 2023
Malware in @huoshanjiebai/ethereumjs-utill
1 compromised version
- Sep 11, 2023
Malicious code in ethereum-cryptograph (npm)
- Sep 11, 2023
Malware in ethereum-cryptograph
1 compromised version
- Sep 11, 2023
Malicious code in npm-random-gen (npm)
1 compromised version
- Sep 11, 2023
Malware in ysb-ui-services
1 compromised version
- Sep 11, 2023
Malware in ui-elements-icons
1 compromised version
- Sep 11, 2023
Malicious code in cxday (npm)
- Sep 11, 2023
Malware in cxday
1 compromised version
- Sep 10, 2023
Malicious code in ysb-ui-services (npm)
2 compromised versions
- Sep 10, 2023
Malicious code in ui-elements-icons (npm)
4 compromised versions
Page 6290 of 6,645