Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,218 total in npm · sorted newest first- Aug 19, 2023
Malicious code in kasms (npm)
8 compromised versions
- Aug 19, 2023
Malicious code in github-deployment-action (npm)
2 compromised versions
- Aug 19, 2023
Malicious code in bugsnotfound (npm)
5 compromised versions
- Aug 19, 2023
Malicious code in postman-zendesk-support-theme (npm)
2 compromised versions
- Aug 19, 2023
Malicious code in f0-data-constructor (npm)
2 compromised versions
- Aug 19, 2023
Malicious code in marvelmaniac-devvit-rce (npm)
4 compromised versions
- Aug 19, 2023
Malicious code in gkuis (npm)
1 compromised version
- Aug 17, 2023
Malicious code in inf-build-module (npm)
- Aug 17, 2023
Malware in inf-build-module
1 compromised version
- Aug 17, 2023
Malicious code in stormapps (npm)
1 compromised version
- Aug 17, 2023
Malware in stormapps
1 compromised version
- Aug 16, 2023
Malicious code in top-gun-maverick (npm)
1 compromised version
- Aug 16, 2023
Malicious code in infima-website (npm)
1 compromised version
- Aug 16, 2023
Malicious code in spark-math (npm)
1 compromised version
- Aug 16, 2023
Malicious code in irviewer (npm)
1 compromised version
- Aug 16, 2023
Malicious code in initial-app (npm)
1 compromised version
- Aug 16, 2023
Malicious code in olymptrade (npm)
- Aug 16, 2023
Malicious code in school-task-tester (npm)
8 compromised versions
- Aug 16, 2023
Malicious code in orbitplate (npm)
8 compromised versions
- Aug 16, 2023
Malicious code in hh-dep-monitoring (npm)
5 compromised versions
- Aug 16, 2023
Malicious code in career-service-client (npm)
8 compromised versions
- Aug 15, 2023
Malicious code in micro-module-test (npm)
1 compromised version
- Aug 15, 2023
Malicious code in leostorm (npm)
1 compromised version
- Aug 15, 2023
Malicious code in snapchat-test-package (npm)
1 compromised version
- Aug 15, 2023
Malicious code in flowtorch (npm)
1 compromised version
- Aug 15, 2023
Malicious code in youse-frontend (npm)
- Aug 15, 2023
Malware in youse-frontend
1 compromised version
- Aug 15, 2023
Malicious code in nayan-te (npm)
- Aug 15, 2023
Malicious code in nayan-remake-tr (npm)
- Aug 15, 2023
Malicious code in nayan-remake-h (npm)
- Aug 15, 2023
Malware in nayan-te
1 compromised version
- Aug 15, 2023
Malware in nayan-remake-tr
1 compromised version
- Aug 15, 2023
Malware in nayan-remake-h
1 compromised version
- Aug 15, 2023
Malicious code in nayan-remake-api (npm)
52 compromised versions
- Aug 15, 2023
Malware in nayan-remake-api
1 compromised version
- Aug 15, 2023
Malicious code in skills-strategy-client (npm)
- Aug 15, 2023
Malware in skills-strategy-client
1 compromised version
- Aug 15, 2023
Malicious code in hardhat-croned (npm)
- Aug 15, 2023
Malware in hardhat-croned
1 compromised version
- Aug 15, 2023
Malicious code in miro-api-clients (npm)
1 compromised version
- Aug 15, 2023
Malware in miro-api-clients
1 compromised version
- Aug 14, 2023
Malicious code in bugvsme (npm)
1 compromised version
- Aug 14, 2023
Malicious code in false-positive-reddit-rce (npm)
1 compromised version
- Aug 14, 2023
Malicious code in marvelmaniac-reddit-rce (npm)
3 compromised versions
- Aug 14, 2023
Malicious code in tianfengqwe (npm)
- Aug 14, 2023
Malware in tianfengqwe
1 compromised version
- Aug 14, 2023
Malicious code in 1ds-cli (npm)
- Aug 14, 2023
Malware in 1ds-cli
1 compromised version
- Aug 14, 2023
Malicious code in marketplace-ibm (npm)
- Aug 14, 2023
Malware in marketplace-ibm
1 compromised version
Page 6297 of 6,645