Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,909 total in npm · sorted newest first- Jul 6, 2023
Malicious code in eth-api-node (npm)
- Jul 6, 2023
Malicious code in kucoin-prices (npm)
- Jul 5, 2023
Malicious code in carbon-sageone (npm)
- Jul 5, 2023
Malware in carbon-sageone
1 compromised version
- Jul 5, 2023
Malicious code in sword123 (npm)
- Jul 5, 2023
Malicious code in indriver (npm)
1 compromised version
- Jul 5, 2023
Malware in indriver
1 compromised version
- Jul 5, 2023
Malware in sword123
1 compromised version
- Jul 4, 2023
Malicious code in react-green-ui (npm)
3 compromised versions
- Jul 4, 2023
Malicious code in blossom-flex-ui-localization (npm)
3 compromised versions
- Jul 4, 2023
Malware in blossom-flex-ui-localization
1 compromised version
- Jul 4, 2023
Malicious code in ng-file-upload-shim (npm)
1 compromised version
- Jul 4, 2023
Malicious code in examplehu (npm)
1 compromised version
- Jul 4, 2023
Malicious code in env-cross (npm)
- Jul 4, 2023
Malware in env-cross
1 compromised version
- Jul 4, 2023
Malicious code in rqzax-sp (npm)
- Jul 4, 2023
Malicious code in rqzax-database (npm)
- Jul 4, 2023
Malicious code in fca-rqzax (npm)
- Jul 4, 2023
Malware in rqzax-database
1 compromised version
- Jul 4, 2023
Malware in rqzax-sp
1 compromised version
- Jul 4, 2023
Malware in fca-rqzax
1 compromised version
- Jul 4, 2023
Malware in xml-fast-decoder
1 compromised version
- Jul 4, 2023
Malware in js-cookie-parser
1 compromised version
- Jul 4, 2023
Malicious code in wix-fitness-nextjs (npm)
2 compromised versions
- Jul 4, 2023
Malicious code in wix-commerce-ticketing-nextjs-template (npm)
2 compromised versions
- Jul 4, 2023
Malicious code in velor (npm)
2 compromised versions
- Jul 4, 2023
Malicious code in velo-external-database-adapter (npm)
2 compromised versions
- Jul 4, 2023
Malicious code in samplepackagedemo (npm)
- Jul 4, 2023
Malicious code in meetingsdk-sample-vuejs (npm)
- Jul 4, 2023
Malicious code in import-cost-monorepo (npm)
2 compromised versions
- Jul 4, 2023
Malicious code in zoomapps-customlayout-js (npm)
- Jul 4, 2023
Malware in velor
1 compromised version
- Jul 4, 2023
Malware in wix-fitness-nextjs
1 compromised version
- Jul 4, 2023
Malware in meetingsdk-sample-vuejs
1 compromised version
- Jul 4, 2023
Malware in samplepackagedemo
1 compromised version
- Jul 4, 2023
Malware in zoomalexa
1 compromised version
- Jul 4, 2023
Malware in wix-commerce-ticketing-nextjs-template
1 compromised version
- Jul 4, 2023
Malware in velo-external-database-adapter
1 compromised version
- Jul 4, 2023
Malware in import-cost-monorepo
1 compromised version
- Jul 4, 2023
Malware in meetingsdk-sample-react
1 compromised version
- Jul 4, 2023
Malware in next-with-frontegg
1 compromised version
- Jul 4, 2023
Malware in zoomapps-customlayout-js
1 compromised version
- Jul 4, 2023
Malicious code in catteleya (npm)
6 compromised versions
- Jul 4, 2023
Malware in catteleya
1 compromised version
- Jul 4, 2023
Malicious code in coingecko-price (npm)
2 compromised versions
- Jul 4, 2023
Malicious code in binance-price (npm)
3 compromised versions
- Jul 4, 2023
Malicious code in binance-prices (npm)
1 compromised version
- Jul 3, 2023
Malicious code in vote-chatbot (npm)
1 compromised version
- Jul 3, 2023
Malicious code in videosdk-web (npm)
1 compromised version
- Jul 3, 2023
Malicious code in zoomalexa (npm)
1 compromised version
Page 6302 of 6,639