Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,218 total in npm · sorted newest first- Aug 28, 2023
Malware in @dpdgroupuk/your-dpd-rest-api-client
1 compromised version
- Aug 28, 2023
Malware in @dpdgroupuk/design-space-components
1 compromised version
- Aug 28, 2023
Malicious code in fca-kizzdev (npm)
- Aug 28, 2023
Malware in fca-kizzdev
1 compromised version
- Aug 28, 2023
Malicious code in dca-huykaiser (npm)
- Aug 28, 2023
Malware in dca-huykaiser
1 compromised version
- Aug 28, 2023
Malicious code in gcore-cdn-stats (npm)
- Aug 28, 2023
Malware in cms-datocms
1 compromised version
- Aug 28, 2023
Malware in gcore-cdn-stats
1 compromised version
- Aug 28, 2023
Malicious code in @webquote-ui/shared (npm)
1 compromised version
- Aug 28, 2023
Malware in @webquote-ui/shared
1 compromised version
- Aug 28, 2023
Malicious code in @webquote-ui/iceberg (npm)
2 compromised versions
- Aug 28, 2023
Malware in @webquote-ui/iceberg
1 compromised version
- Aug 28, 2023
Malicious code in @intact-lab/ngx-iceberg-links (npm)
1 compromised version
- Aug 28, 2023
Malware in @intact-lab/ngx-iceberg-links
1 compromised version
- Aug 28, 2023
Malicious code in @intact-lab/ngx-iceberg (npm)
1 compromised version
- Aug 28, 2023
Malware in @intact-lab/ngx-iceberg
1 compromised version
- Aug 27, 2023
Malicious code in twentytwenty (npm)
1 compromised version
- Aug 27, 2023
Malicious code in helio_tawa (npm)
3 compromised versions
- Aug 27, 2023
Malicious code in aws-encryption-sdk-javascript (npm)
1 compromised version
- Aug 27, 2023
Malicious code in yoga-repo (npm)
2 compromised versions
- Aug 26, 2023
Malicious code in cms-datocms (npm)
1 compromised version
- Aug 26, 2023
Malicious code in ez-retro-server (npm)
1 compromised version
- Aug 26, 2023
Malicious code in hydra-consent-app-express (npm)
2 compromised versions
- Aug 25, 2023
Malicious code in payuangular (npm)
1 compromised version
- Aug 25, 2023
Malicious code in emails-helper (npm)
10 compromised versions
- Aug 25, 2023
Malicious code in mx-icon (npm)
2 compromised versions
- Aug 25, 2023
Malware in mx-icon
1 compromised version
- Aug 25, 2023
Malicious code in ux-authentication-auth0 (npm)
1 compromised version
- Aug 25, 2023
Malicious code in eslint-config-web3-base (npm)
3 compromised versions
- Aug 25, 2023
Malicious code in fca-donqdev (npm)
- Aug 25, 2023
Malware in fca-donqdev
1 compromised version
- Aug 25, 2023
Malicious code in fca-mdong-remake (npm)
- Aug 25, 2023
Malware in fca-mdong-remake
1 compromised version
- Aug 25, 2023
Malicious code in malfex_api (npm)
- Aug 25, 2023
Malware in malfex_api
1 compromised version
- Aug 25, 2023
Malware in gradient-function
1 compromised version
- Aug 25, 2023
Malicious code in prompt-line (npm)
- Aug 25, 2023
Malware in prompt-line
1 compromised version
- Aug 25, 2023
Malicious code in discord.js-selfbot-v14 (npm)
- Aug 25, 2023
Malware in discord.js-selfbot-v14
1 compromised version
- Aug 25, 2023
Malicious code in poctesthackerone (npm)
- Aug 25, 2023
Malware in poctesthackerone
1 compromised version
- Aug 24, 2023
Malicious code in website-frontend-cms (npm)
1 compromised version
- Aug 24, 2023
Malicious code in gapps-automation (npm)
1 compromised version
- Aug 24, 2023
Malicious code in happa (npm)
1 compromised version
- Aug 24, 2023
Malicious code in @dpdgroupuk/design-space-components (npm)
1 compromised version
- Aug 24, 2023
Malicious code in @dpdgroupuk/your-dpd-rest-api-client (npm)
1 compromised version
- Aug 24, 2023
Malicious code in platon-contract (npm)
1 compromised version
- Aug 24, 2023
Malicious code in devops-challenge (npm)
2 compromised versions
Page 6294 of 6,645