Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,218 total in npm · sorted newest first- Jun 6, 2023
Malware in fc-session-state
1 compromised version
- Jun 6, 2023
Malware in fc-step
1 compromised version
- Jun 6, 2023
Malware in fc-spinner
1 compromised version
- Jun 6, 2023
Malware in fc-switch
1 compromised version
- Jun 6, 2023
Malicious code in fc-mailcheck (npm)
- Jun 6, 2023
Malicious code in fc-keep-alive (npm)
- Jun 6, 2023
Malicious code in fc-grid (npm)
- Jun 6, 2023
Malicious code in fc-forms (npm)
- Jun 6, 2023
Malicious code in fc-foreign-address (npm)
- Jun 6, 2023
Malicious code in fc-fatca (npm)
- Jun 6, 2023
Malicious code in fc-expressions (npm)
- Jun 6, 2023
Malicious code in fc-explanation (npm)
- Jun 6, 2023
Malicious code in fc-dutch-address (npm)
- Jun 6, 2023
Malicious code in fc-dropdown (npm)
- Jun 6, 2023
Malicious code in fc-date (npm)
- Jun 6, 2023
Malicious code in fc-customer-service (npm)
- Jun 6, 2023
Malicious code in fc-crs (npm)
- Jun 6, 2023
Malicious code in fc-country-select (npm)
- Jun 6, 2023
Malicious code in fc-cookie (npm)
- Jun 6, 2023
Malicious code in fc-content (npm)
- Jun 6, 2023
Malicious code in fc-configuration (npm)
- Jun 6, 2023
Malicious code in fc-collabsible (npm)
- Jun 6, 2023
Malicious code in fc-carousel (npm)
- Jun 6, 2023
Malware in fc-fatca
1 compromised version
- Jun 6, 2023
Malware in fc-foreign-address
1 compromised version
- Jun 6, 2023
Malware in fc-iban
1 compromised version
- Jun 6, 2023
Malware in fc-dropdown
1 compromised version
- Jun 6, 2023
Malware in fc-keep-alive
1 compromised version
- Jun 6, 2023
Malware in fc-carousel
1 compromised version
- Jun 6, 2023
Malware in fc-configuration
1 compromised version
- Jun 6, 2023
Malware in fc-cookie
1 compromised version
- Jun 6, 2023
Malware in fc-dutch-address
1 compromised version
- Jun 6, 2023
Malware in fc-analytics
1 compromised version
- Jun 6, 2023
Malware in fc-explanation
1 compromised version
- Jun 6, 2023
Malware in fc-content
1 compromised version
- Jun 6, 2023
Malware in fc-mailcheck
1 compromised version
- Jun 6, 2023
Malware in fc-crs
1 compromised version
- Jun 6, 2023
Malware in fc-date
1 compromised version
- Jun 6, 2023
Malware in fc-assets
1 compromised version
- Jun 6, 2023
Malware in fc-customer-service
1 compromised version
- Jun 6, 2023
Malware in fc-collabsible
1 compromised version
- Jun 6, 2023
Malware in fc-forms
1 compromised version
- Jun 6, 2023
Malware in fc-country-select
1 compromised version
- Jun 6, 2023
Malware in fc-expressions
1 compromised version
- Jun 6, 2023
Malware in fc-grid
1 compromised version
- Jun 6, 2023
Malicious code in theme-next (npm)
- Jun 6, 2023
Malicious code in privacy-mask (npm)
- Jun 6, 2023
Malicious code in multivariate-experiments (npm)
- Jun 6, 2023
Malicious code in legal-footer (npm)
- Jun 6, 2023
Malicious code in kiosk-util (npm)
Page 6313 of 6,645