Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,218 total in npm · sorted newest first- Jun 13, 2023
Malicious code in elliptic-helper (npm)
- Jun 13, 2023
Malicious code in chart-tablejs (npm)
- Jun 12, 2023
Malicious code in ttf-metadata (npm)
- Jun 12, 2023
Malicious code in jpeg-metadata (npm)
- Jun 9, 2023
Malicious code in discount-pwa (npm)
- Jun 8, 2023
Malicious code in logzio-azure-serverless (npm)
1 compromised version
- Jun 7, 2023
Malicious code in testipaketti_keketester (npm)
1 compromised version
- Jun 7, 2023
Malicious code in com.unity.meshopt.decompress (npm)
1 compromised version
- Jun 6, 2023
Malicious code in auto-protect-node (npm)
- Jun 6, 2023
Malware in auto-protect-node
1 compromised version
- Jun 6, 2023
Malicious code in kbwood-jquery-svg (npm)
- Jun 6, 2023
Malicious code in eslint-plugin-artsy (npm)
- Jun 6, 2023
Malware in eslint-plugin-artsy
1 compromised version
- Jun 6, 2023
Malware in kbwood-jquery-svg
1 compromised version
- Jun 6, 2023
Malicious code in fc-utilities (npm)
- Jun 6, 2023
Malicious code in fc-transactions-service (npm)
- Jun 6, 2023
Malicious code in fc-text-input (npm)
- Jun 6, 2023
Malicious code in fc-template (npm)
- Jun 6, 2023
Malicious code in fc-switch (npm)
- Jun 6, 2023
Malicious code in fc-style (npm)
- Jun 6, 2023
Malicious code in fc-spinner (npm)
- Jun 6, 2023
Malicious code in fc-settings-service (npm)
- Jun 6, 2023
Malicious code in fc-session-state (npm)
- Jun 6, 2023
Malicious code in fc-scroll (npm)
- Jun 6, 2023
Malicious code in fc-radio-button (npm)
- Jun 6, 2023
Malicious code in fc-phone-number (npm)
- Jun 6, 2023
Malicious code in fc-personal-details (npm)
- Jun 6, 2023
Malicious code in fc-persistence (npm)
- Jun 6, 2023
Malicious code in fc-panel (npm)
- Jun 6, 2023
Malicious code in fc-modal (npm)
- Jun 6, 2023
Malicious code in fc-mijn-menu (npm)
- Jun 6, 2023
Malicious code in fc-generic (npm)
- Jun 6, 2023
Malware in fc-login
1 compromised version
- Jun 6, 2023
Malware in fc-panel
1 compromised version
- Jun 6, 2023
Malware in fc-style
1 compromised version
- Jun 6, 2023
Malware in fc-persistence
1 compromised version
- Jun 6, 2023
Malware in fc-persoonlijke-pas
1 compromised version
- Jun 6, 2023
Malware in fc-scroll
1 compromised version
- Jun 6, 2023
Malware in fc-personal-details
1 compromised version
- Jun 6, 2023
Malware in fc-phone-number
1 compromised version
- Jun 6, 2023
Malware in fc-transactions-service
1 compromised version
- Jun 6, 2023
Malware in fc-modal
1 compromised version
- Jun 6, 2023
Malware in fc-template
1 compromised version
- Jun 6, 2023
Malware in fc-radio-button
1 compromised version
- Jun 6, 2023
Malware in fc-lsm
1 compromised version
- Jun 6, 2023
Malware in fc-generic
1 compromised version
- Jun 6, 2023
Malware in fc-utilities
1 compromised version
- Jun 6, 2023
Malware in fc-text-input
1 compromised version
- Jun 6, 2023
Malware in fc-mijn-menu
1 compromised version
- Jun 6, 2023
Malware in fc-settings-service
1 compromised version
Page 6312 of 6,645