Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,218 total in npm · sorted newest first- Sep 1, 2023
Malicious code in fiji-core-foc (npm)
1 compromised version
- Sep 1, 2023
Malicious code in fiji-core-cryptopool (npm)
1 compromised version
- Sep 1, 2023
Malicious code in feature-flag-framework (npm)
1 compromised version
- Sep 1, 2023
Malicious code in fiji-core-foundation (npm)
1 compromised version
- Sep 1, 2023
Malicious code in fiji-core-framework (npm)
1 compromised version
- Sep 1, 2023
Malicious code in jupiter-emoji (npm)
1 compromised version
- Sep 1, 2023
Malicious code in course-structure-debugger (npm)
2 compromised versions
- Sep 1, 2023
Malicious code in emonnn-test (npm)
- Sep 1, 2023
Malicious code in emon78 (npm)
- Sep 1, 2023
Malicious code in emon-testt (npm)
- Sep 1, 2023
Malicious code in emon-test-emon (npm)
- Sep 1, 2023
Malware in emon78
1 compromised version
- Sep 1, 2023
Malware in emonnn-test
1 compromised version
- Sep 1, 2023
Malware in emon-test-emon
1 compromised version
- Sep 1, 2023
Malware in emonn-test
1 compromised version
- Sep 1, 2023
Malware in emon-testt
1 compromised version
- Sep 1, 2023
Malware in eforemon
1 compromised version
- Aug 31, 2023
Malicious code in metronome-ui (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in wallet-switch-chain (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in repsol-uikit (npm)
3 compromised versions
- Aug 31, 2023
Malicious code in wallet-watch-asset (npm)
1 compromised version
- Aug 31, 2023
Malicious code in web3-provider-patchers (npm)
1 compromised version
- Aug 31, 2023
Malicious code in wallet-add-chain (npm)
1 compromised version
- Aug 31, 2023
Malicious code in eforemon (npm)
1 compromised version
- Aug 31, 2023
Malicious code in emonn-test (npm)
1 compromised version
- Aug 31, 2023
Malicious code in mc-dxp (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in mmolecule-sqs (npm)
2 compromised versions
- Aug 31, 2023
Malware in mmolecule-sqs
1 compromised version
- Aug 31, 2023
Malicious code in mmolecule-redis (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in mmolecule-pm2-metrics (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in mmolecule-mysql (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in mmolecule-mongo (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in mmolecule-logger (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in mmolecule-jwt (npm)
2 compromised versions
- Aug 31, 2023
Malware in mmolecule-redis
1 compromised version
- Aug 31, 2023
Malware in mmolecule-mysql
1 compromised version
- Aug 31, 2023
Malware in mmolecule-mongo
1 compromised version
- Aug 31, 2023
Malware in mmolecule-pm2-metrics
1 compromised version
- Aug 31, 2023
Malware in mmolecule-jwt
1 compromised version
- Aug 31, 2023
Malware in mmolecule-logger
1 compromised version
- Aug 31, 2023
Malicious code in react-navigation-core (npm)
3 compromised versions
- Aug 31, 2023
Malicious code in react-navigation-area-view (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in mmolecule-httprequester (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in mmolecule-elasticsearch (npm)
2 compromised versions
- Aug 31, 2023
Malware in mmolecule-elasticsearch
1 compromised version
- Aug 31, 2023
Malware in react-navigation-core
1 compromised version
- Aug 31, 2023
Malware in react-navigation-area-view
1 compromised version
- Aug 31, 2023
Malware in mmolecule-httprequester
1 compromised version
- Aug 31, 2023
Malicious code in @manomano-internal/toolbox-pkg-components (npm)
3 compromised versions
- Aug 31, 2023
Malware in @manomano-internal/toolbox-pkg-components
1 compromised version
Page 6292 of 6,645