Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,610 total in npm · sorted newest first- MAL-2023-901Malwarenpmtranny-confessions-of-punk-rocks-most-infamous-anarchist-sellout-by-laura-jane-grace-on-audible-fullMay 10, 2023
Malicious code in tranny-confessions-of-punk-rocks-most-infamous-anarchist-sellout-by-laura-jane-grace-on-audible-full (npm)
- MAL-2023-887Malwarenpmthis-is-war-travis--viola-1-checkmate-duet-1-by-kennedy-fox-on-audible-full-edition-May 10, 2023
Malicious code in this-is-war-travis--viola-1-checkmate-duet-1-by-kennedy-fox-on-audible-full-edition- (npm)
- MAL-2023-869Malwarenpmthe-girl-with-the-make-believe-husband-rokesbys-2-by-julia-quinn-on-ipad-new-chapters-May 10, 2023
Malicious code in the-girl-with-the-make-believe-husband-rokesbys-2-by-julia-quinn-on-ipad-new-chapters- (npm)
- MAL-2023-786Malwarenpmspaceman-an-astronauts-unlikely-journey-to-unlock-the-secrets-of-the-universe-by-mike-massimino-on-aMay 10, 2023
Malicious code in spaceman-an-astronauts-unlikely-journey-to-unlock-the-secrets-of-the-universe-by-mike-massimino-on-a (npm)
- May 10, 2023
Malicious code in pdf-off-base-out-of-uniform-1-by-annabeth-albert-on-iphone-new-volumes- (npm)
- MAL-2023-674Malwarenpmpdf-a-court-of-wings-and-ruin-a-court-of-thorns-and-roses-3-by-sarah-j-maas-on-iphone-full-chapters-May 10, 2023
Malicious code in pdf-a-court-of-wings-and-ruin-a-court-of-thorns-and-roses-3-by-sarah-j-maas-on-iphone-full-chapters- (npm)
- MAL-2023-225Malwarenpmdark-warriors-promise-the-children-of-the-gods-8-by-it-lucas-on-audible-new-edition-May 10, 2023
Malicious code in dark-warriors-promise-the-children-of-the-gods-8-by-it-lucas-on-audible-new-edition- (npm)
- GHSA-vx45-2g2x-388gMalwarenpmthe-girl-with-the-make-believe-husband-rokesbys-2-by-julia-quinn-on-ipad-new-chapters-May 10, 2023
Malware in the-girl-with-the-make-believe-husband-rokesbys-2-by-julia-quinn-on-ipad-new-chapters-
1 compromised version
- May 10, 2023
Malware in wolfsong-green-creek-1-by-tj-klune-on-mac-new-volumes-
1 compromised version
- GHSA-q9c9-v525-vh64Malwarenpmthis-is-war-travis--viola-1-checkmate-duet-1-by-kennedy-fox-on-audible-full-edition-May 10, 2023
Malware in this-is-war-travis--viola-1-checkmate-duet-1-by-kennedy-fox-on-audible-full-edition-
1 compromised version
- GHSA-h3vh-6gg2-5h3jMalwarenpmspaceman-an-astronauts-unlikely-journey-to-unlock-the-secrets-of-the-universe-by-mike-massimino-on-aMay 10, 2023
Malware in spaceman-an-astronauts-unlikely-journey-to-unlock-the-secrets-of-the-universe-by-mike-massimino-on-a
1 compromised version
- GHSA-f4wm-9254-3j64Malwarenpmdark-warriors-promise-the-children-of-the-gods-8-by-it-lucas-on-audible-new-edition-May 10, 2023
Malware in dark-warriors-promise-the-children-of-the-gods-8-by-it-lucas-on-audible-new-edition-
1 compromised version
- GHSA-9qhc-rh5g-r6wpMalwarenpmpdf-a-court-of-wings-and-ruin-a-court-of-thorns-and-roses-3-by-sarah-j-maas-on-iphone-full-chapters-May 10, 2023
Malware in pdf-a-court-of-wings-and-ruin-a-court-of-thorns-and-roses-3-by-sarah-j-maas-on-iphone-full-chapters-
1 compromised version
- GHSA-5cg7-hq4x-497mMalwarenpmtranny-confessions-of-punk-rocks-most-infamous-anarchist-sellout-by-laura-jane-grace-on-audible-fullMay 10, 2023
Malware in tranny-confessions-of-punk-rocks-most-infamous-anarchist-sellout-by-laura-jane-grace-on-audible-full
1 compromised version
- GHSA-55qx-782c-6vx9Malwarenpmpdf-off-base-out-of-uniform-1-by-annabeth-albert-on-iphone-new-volumes-May 10, 2023
Malware in pdf-off-base-out-of-uniform-1-by-annabeth-albert-on-iphone-new-volumes-
1 compromised version
- May 10, 2023
Malicious code in confuseddeps (npm)
1 compromised version
- May 10, 2023
Malicious code in stripe-deep-dup-tree (npm)
2 compromised versions
- May 10, 2023
Malicious code in stripe-deep-deep (npm)
1 compromised version
- May 9, 2023
Malicious code in pwa-mmt-ui-header (npm)
1 compromised version
- May 9, 2023
Malicious code in com.google.devtools.atsconsole.controller.proto (npm)
- May 9, 2023
Malware in com.google.devtools.atsconsole.controller.proto
1 compromised version
- May 9, 2023
Malware in pwa-mmt-ui-header
1 compromised version
- May 9, 2023
Malicious code in viihdeonline-shared-components (npm)
8 compromised versions
- May 9, 2023
Malicious code in oj-mithril-utils (npm)
8 compromised versions
- May 9, 2023
Malicious code in oj-mithril-packages (npm)
8 compromised versions
- May 9, 2023
Malicious code in oj-form-helper (npm)
8 compromised versions
- May 9, 2023
Malicious code in oj-cropper (npm)
8 compromised versions
- May 9, 2023
Malicious code in mv-browser-support (npm)
- May 9, 2023
Malicious code in mapi-js (npm)
- May 9, 2023
Malicious code in dojo-common (npm)
8 compromised versions
- May 9, 2023
Malware in mv-browser-support
1 compromised version
- May 9, 2023
Malware in oj-mithril-utils
1 compromised version
- May 9, 2023
Malware in oj-mithril-packages
1 compromised version
- May 9, 2023
Malware in oj-form-helper
1 compromised version
- May 9, 2023
Malware in viihdeonline-shared-components
1 compromised version
- May 9, 2023
Malware in mapi-js
1 compromised version
- May 9, 2023
Malware in oj-cropper
1 compromised version
- May 9, 2023
Malware in dojo-common
1 compromised version
- May 9, 2023
Malicious code in discord-sp (npm)
- May 9, 2023
Malware in discord-sp
1 compromised version
- May 9, 2023
Malicious code in foofoo (npm)
- May 9, 2023
Malware in foofoo
1 compromised version
- May 9, 2023
Malicious code in jannah-client (npm)
- May 9, 2023
Malware in jannah-client
1 compromised version
- May 9, 2023
Malicious code in burningskyme (npm)
- May 9, 2023
Malware in burningskyme
1 compromised version
- May 9, 2023
Malicious code in experimental-entrevista-react-01 (npm)
- May 9, 2023
Malware in serverless-action
1 compromised version
- May 9, 2023
Malware in experimental-entrevista-react-01
1 compromised version
- May 9, 2023
Malware in pcorbr-ui-framework
1 compromised version
Page 6309 of 6,633