Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,883 total in npm · sorted newest first- Jun 27, 2023
Malicious code in @nursefly/tokens (npm)
2 compromised versions
- Jun 27, 2023
Malicious code in @okcoin-dev/blade (npm)
1 compromised version
- Jun 26, 2023
Malware in mesos-term
1 compromised version
- Jun 26, 2023
Malware in graphite_remote_adapter
1 compromised version
- Jun 26, 2023
Malware in doks-child-theme
1 compromised version
- Jun 26, 2023
Malware in cypress-typed-stubs-example-app
1 compromised version
- Jun 26, 2023
Malware in babar-report
1 compromised version
- Jun 26, 2023
Malware in criteo-static-variables-datasource
1 compromised version
- Jun 26, 2023
Malware in react-liveness
1 compromised version
- Jun 26, 2023
Malicious code in reactsix (npm)
1 compromised version
- Jun 26, 2023
Malware in reactsix
1 compromised version
- Jun 24, 2023
Malicious code in cypress-typed-stubs-example-app (npm)
1 compromised version
- Jun 24, 2023
Malicious code in graphite_remote_adapter (npm)
1 compromised version
- Jun 24, 2023
Malicious code in doks-child-theme (npm)
1 compromised version
- Jun 24, 2023
Malicious code in mesos-term (npm)
1 compromised version
- Jun 24, 2023
Malicious code in criteo-static-variables-datasource (npm)
1 compromised version
- Jun 24, 2023
Malicious code in babar-report (npm)
1 compromised version
- Jun 24, 2023
Malicious code in techghoshal555 (npm)
1 compromised version
- Jun 23, 2023
Malicious code in nowyouseereact (npm)
1 compromised version
- Jun 23, 2023
Malicious code in proteus-demo-app-server (npm)
2 compromised versions
- Jun 23, 2023
Malicious code in react-liveness (npm)
2 compromised versions
- Jun 23, 2023
Malicious code in angular-mep (npm)
1 compromised version
- Jun 22, 2023
Malware in grocerylink
1 compromised version
- Jun 22, 2023
Malware in flutter_appsflyer_sdk
1 compromised version
- Jun 22, 2023
Malware in github_projects_page
1 compromised version
- Jun 22, 2023
Malicious code in yaml2stream (npm)
- Jun 22, 2023
Malware in yaml2stream
1 compromised version
- Jun 22, 2023
Malware in yaml2binary
1 compromised version
- Jun 22, 2023
Malicious code in github_projects_page (npm)
1 compromised version
- Jun 22, 2023
Malicious code in grocerylink (npm)
1 compromised version
- Jun 22, 2023
Malicious code in flutter_appsflyer_sdk (npm)
1 compromised version
- Jun 22, 2023
Malicious code in wm-webpack-player-sri (npm)
1 compromised version
- Jun 22, 2023
Malicious code in bespin_server (npm)
1 compromised version
- Jun 22, 2023
Malicious code in vymo-jsevaluator (npm)
1 compromised version
- Jun 22, 2023
Malicious code in snykaudit-helper (npm)
- Jun 22, 2023
Malicious code in couchcache-audit (npm)
- Jun 21, 2023
Malicious code in workfront-rte (npm)
1 compromised version
- Jun 21, 2023
Malicious code in proofing (npm)
1 compromised version
- Jun 21, 2023
Malicious code in single-spa-workfront (npm)
1 compromised version
- Jun 21, 2023
Malicious code in mfe-test-utils (npm)
1 compromised version
- Jun 21, 2023
Malicious code in workfront-typescript-definitions (npm)
1 compromised version
- Jun 21, 2023
Malicious code in quarry-connected (npm)
1 compromised version
- Jun 21, 2023
Malicious code in sync-https-api (npm)
- Jun 21, 2023
Malicious code in sync-http-api (npm)
- Jun 21, 2023
Malicious code in assets-table (npm)
- Jun 21, 2023
Malicious code in assets-graph (npm)
- Jun 20, 2023
Malicious code in @ans-exam/client (npm)
- Jun 20, 2023
Malware in @ans-exam/client
1 compromised version
- Jun 20, 2023
Malware in pesa-demo
1 compromised version
- Jun 20, 2023
Malicious code in other-web3 (npm)
Page 6303 of 6,638