Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,218 total in npm · sorted newest first- May 9, 2023
Malware in maltego_3_license_key_fixed_nizvp
1 compromised version
- May 9, 2023
Malware in hd_online_player_final_fantasy_vii_advent_children_co__7i1
1 compromised version
- May 9, 2023
Malware in noor_ul_iman_tarjuma_quran_pdf_free_free__kv
1 compromised version
- May 9, 2023
Malware in causeway_cato_suite_software_crack_fqyw
1 compromised version
- May 9, 2023
Malware in arkaos_nuvj_1_5_serial_number_xx4w9
1 compromised version
- May 9, 2023
Malware in hk_780_usb_dental_camera_driver_ru
1 compromised version
- May 9, 2023
Malware in norbert_malik_circuitos_electronicos_pdf_2d
1 compromised version
- May 9, 2023
Malware in ic_27_health_insurance_pdf_h2g28
1 compromised version
- May 9, 2023
Malware in omron_cx_supervisor_v3_1_rar_xvak
1 compromised version
- May 9, 2023
Malware in instant_verb_tables_roxanne_burns_pdf___hot___uy4
1 compromised version
- May 9, 2023
Malware in new_cracker_element_3d_after_effect_cs6_new_crack_dzr
1 compromised version
- May 9, 2023
Malware in der_zahlenteufel_enzensberger_pdf_free_hot__760
1 compromised version
- May 9, 2023
Malware in sejarah_dunia_kuno_pdf_45_rwrnu
1 compromised version
- May 9, 2023
Malware in sdc40_yamatake_manual_gi
1 compromised version
- May 9, 2023
Malware in milica_jakovljevic_mala_supruga_pdf__verified___flo
1 compromised version
- May 9, 2023
Malware in insidious_chapter_2_free_in_hindi_full__hd
1 compromised version
- May 9, 2023
Malware in 04xi_mfz
1 compromised version
- May 9, 2023
Malware in kitab_ta_lim_muta_alim_pdf_link__4i
1 compromised version
- May 9, 2023
Malware in hpsmartstreamforindesigncccrack_7kh
1 compromised version
- May 9, 2023
Malicious code in animoto_full_version_portable_crack_rt (npm)
- May 9, 2023
Malware in animoto_full_version_portable_crack_rt
1 compromised version
- May 8, 2023
Malicious code in mesbah-unclaim (npm)
3 compromised versions
- May 8, 2023
Malicious code in com.unity.test-runner-manual-tests (npm)
1 compromised version
- May 8, 2023
Malicious code in com.unity.xrtools.spatial-hash (npm)
1 compromised version
- May 8, 2023
Malicious code in a2b_hex (npm)
1 compromised version
- May 8, 2023
Malicious code in discord-spammer-webhooks (npm)
- May 5, 2023
Malicious code in pmcrypto-v7 (npm)
1 compromised version
- May 5, 2023
Malicious code in pmcrypto-v7-test (npm)
1 compromised version
- May 5, 2023
Malicious code in serverless-action (npm)
1 compromised version
- May 5, 2023
Malicious code in suncorp-styleguide-react-components (npm)
4 compromised versions
- May 5, 2023
Malicious code in back-alley (npm)
1 compromised version
- May 5, 2023
Malicious code in confusedatma (npm)
3 compromised versions
- May 5, 2023
Malicious code in font-forno (npm)
1 compromised version
- May 4, 2023
Malicious code in pcorbr-dlb (npm)
1 compromised version
- May 4, 2023
Malicious code in pcorbr-ui-framework (npm)
1 compromised version
- May 4, 2023
Malicious code in santander-portal-node-library (npm)
1 compromised version
- May 4, 2023
Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests (npm)
1 compromised version
- May 4, 2023
Malicious code in bitshares-ui-style-guide (npm)
1 compromised version
- May 4, 2023
Malicious code in postaggingcorenlp (npm)
1 compromised version
- May 4, 2023
Malicious code in idcs-dialog (npm)
2 compromised versions
- May 4, 2023
Malicious code in music-pro (npm)
- May 4, 2023
Malware in music-pro
1 compromised version
- May 4, 2023
Malicious code in nemocloud (npm)
1 compromised version
- May 4, 2023
Malicious code in ban-notifier4 (npm)
1 compromised version
- May 3, 2023
Malicious code in kobi--front-helpers (npm)
3 compromised versions
- May 3, 2023
Malicious code in not-a-real-project (npm)
1 compromised version
- May 3, 2023
Malicious code in not-a-real-dep (npm)
1 compromised version
- May 3, 2023
Malicious code in api-code-capture-chrome-extension (npm)
1 compromised version
- May 3, 2023
Malicious code in afterpay-sdk-example-server (npm)
3 compromised versions
- May 3, 2023
Malicious code in another-dev-dependency3 (npm)
1 compromised version
Page 6324 of 6,645