Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,218 total in npm · sorted newest first- May 29, 2023
Malware in pruebalol
1 compromised version
- May 29, 2023
Malicious code in cptalertbox (npm)
3 compromised versions
- May 28, 2023
Malicious code in highchartexport (npm)
1 compromised version
- May 28, 2023
Malicious code in itemsselector (npm)
1 compromised version
- May 28, 2023
Malicious code in highchartsofflineexport (npm)
1 compromised version
- May 28, 2023
Malicious code in @satsuitesdk/score-choice-policy (npm)
1 compromised version
- May 27, 2023
Malicious code in superagt (npm)
2 compromised versions
- May 27, 2023
Malicious code in pitito (npm)
3 compromised versions
- May 27, 2023
Malicious code in bootstrap-without-jquery (npm)
2 compromised versions
- May 27, 2023
Malicious code in mintel-tokens (npm)
4 compromised versions
- May 27, 2023
Malicious code in mintel-react-ui (npm)
4 compromised versions
- May 27, 2023
Malicious code in mintel-navigation (npm)
3 compromised versions
- May 26, 2023
Malicious code in application-delivery-tool-preload-expo (npm)
1 compromised version
- May 26, 2023
Malicious code in elpititaso (npm)
1 compromised version
- May 25, 2023
Malicious code in vpro-bootstrap (npm)
5 compromised versions
- May 25, 2023
Malware in vpro-bootstrap
1 compromised version
- May 25, 2023
Malware in vpro-mediaplayer
1 compromised version
- May 25, 2023
Malicious code in compute-starter-kit-assemblyscript-default (npm)
1 compromised version
- May 25, 2023
Malware in compute-starter-kit-assemblyscript-default
1 compromised version
- May 25, 2023
Malicious code in actblue-contributions (npm)
1 compromised version
- May 25, 2023
Malware in actblue-contributions
1 compromised version
- May 25, 2023
Malicious code in google-bard724 (npm)
- May 25, 2023
Malware in google-bard724
1 compromised version
- May 25, 2023
Malicious code in vpro-mediaplayer (npm)
1 compromised version
- May 25, 2023
Malicious code in test-op-solhint (npm)
1 compromised version
- May 24, 2023
Malicious code in grpc-web-devtools (npm)
1 compromised version
- May 24, 2023
Malicious code in pack-123-new (npm)
1 compromised version
- May 24, 2023
Malicious code in yelp-js-error-reporting-init-error-reporting (npm)
1 compromised version
- May 24, 2023
Malicious code in client-ws-app (npm)
2 compromised versions
- May 24, 2023
Malicious code in ee-cloud-functions (npm)
1 compromised version
- May 24, 2023
Malicious code in payouts-sdk-samples (npm)
1 compromised version
- May 24, 2023
Malicious code in int_access_worldpay_sfra (npm)
1 compromised version
- May 23, 2023
Malicious code in wcc-connector (npm)
1 compromised version
- May 23, 2023
Malicious code in obao-digital-pnm-ui (npm)
1 compromised version
- May 22, 2023
Malicious code in standforusz (npm)
- May 22, 2023
Malware in standforusz
1 compromised version
- May 22, 2023
Malicious code in react-vuejs (npm)
- May 22, 2023
Malware in react-vuejs
1 compromised version
- May 21, 2023
Malicious code in uurl-search-params (npm)
1 compromised version
- May 20, 2023
Malicious code in stripe-terminal-react-native (npm)
1 compromised version
- May 20, 2023
Malicious code in mets-disclosures (npm)
1 compromised version
- May 19, 2023
Malicious code in microsoft.quantum.sdk (npm)
1 compromised version
- May 18, 2023
Malicious code in docs-component-follow-public-pop (npm)
1 compromised version
- May 18, 2023
Malicious code in docs-component-title (npm)
2 compromised versions
- May 18, 2023
Malicious code in docs-component-advanced-permission (npm)
1 compromised version
- May 18, 2023
Malicious code in docs-component-like (npm)
1 compromised version
- May 18, 2023
Malicious code in docs-component-folder-selector (npm)
2 compromised versions
- May 18, 2023
Malicious code in index-template-mets (npm)
1 compromised version
- May 17, 2023
Malicious code in nightmaretestingpackage (npm)
1 compromised version
- May 17, 2023
Malicious code in vue2ejs (npm)
Page 6316 of 6,645