Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,218 total in npm · sorted newest first- Mar 31, 2023
Malware in tdv2-applet-stream
1 compromised version
- Mar 31, 2023
Malware in tdv2-applet-navrail
1 compromised version
- Mar 31, 2023
Malware in tdv2-applet-uh
1 compromised version
- Mar 31, 2023
Malware in tdv2-service-ads
1 compromised version
- Mar 31, 2023
Malware in tdv2-applet-account-switch
1 compromised version
- Mar 31, 2023
Malware in tdv2-applet-sports-media
1 compromised version
- Mar 31, 2023
Malware in tdv2-applet-search-input
1 compromised version
- Mar 31, 2023
Malware in lupinfakepackagingforscanners
1 compromised version
- Mar 31, 2023
Malicious code in sa-club-documentation (npm)
- Mar 31, 2023
Malicious code in mlp-friendship-map-mapping (npm)
- Mar 31, 2023
Malicious code in k8s-tools (npm)
- Mar 31, 2023
Malicious code in epic-diesel (npm)
- Mar 31, 2023
Malware in epic-diesel
1 compromised version
- Mar 31, 2023
Malware in mlp-friendship-map-mapping
1 compromised version
- Mar 31, 2023
Malware in sa-club-documentation
1 compromised version
- Mar 31, 2023
Malware in k8s-tools
1 compromised version
- Mar 29, 2023
Malicious code in thewise (npm)
- Mar 29, 2023
Malicious code in testing-dummy (npm)
- Mar 29, 2023
Malicious code in stripe-firebase-extensions (npm)
1 compromised version
- Mar 29, 2023
Malicious code in pixelstreaming-sfu (npm)
4 compromised versions
- Mar 29, 2023
Malicious code in int_stripe_sfra (npm)
1 compromised version
- Mar 29, 2023
Malicious code in firestore-stripe-payments (npm)
1 compromised version
- Mar 29, 2023
Malicious code in cirrus-matchmaker (npm)
6 compromised versions
- Mar 29, 2023
Malware in pixelstreaming-sfu
1 compromised version
- Mar 29, 2023
Malware in thewise
1 compromised version
- Mar 29, 2023
Malware in stripe-firebase-extensions
1 compromised version
- Mar 29, 2023
Malware in cirrus-matchmaker
1 compromised version
- Mar 29, 2023
Malware in firestore-stripe-payments
1 compromised version
- Mar 29, 2023
Malware in int_stripe_sfra
1 compromised version
- Mar 29, 2023
Malware in testing-dummy
1 compromised version
- Mar 28, 2023
Malicious code in w00dr0w-test (npm)
- Mar 28, 2023
Malicious code in usaa-textarea (npm)
- Mar 28, 2023
Malicious code in usaa-slider (npm)
- Mar 28, 2023
Malicious code in usaa-select (npm)
- Mar 28, 2023
Malicious code in usaa-input-utils (npm)
- Mar 28, 2023
Malicious code in error-vitals-web (npm)
- Mar 28, 2023
Malicious code in ent-member-profile-home (npm)
- Mar 28, 2023
Malware in usaa-textarea
1 compromised version
- Mar 28, 2023
Malware in error-vitals-web
1 compromised version
- Mar 28, 2023
Malware in usaa-select
1 compromised version
- Mar 28, 2023
Malware in ent-member-profile-home
1 compromised version
- Mar 28, 2023
Malware in usaa-input-utils
1 compromised version
- Mar 28, 2023
Malware in usaa-slider
1 compromised version
- Mar 28, 2023
Malware in w00dr0w-test
1 compromised version
- Mar 24, 2023
Malicious code in fca-hnn (npm)
- Mar 24, 2023
Malicious code in fb-tools (npm)
- Mar 24, 2023
Malicious code in fb-chat-api2 (npm)
- Mar 24, 2023
Malware in fb-tools
1 compromised version
- Mar 24, 2023
Malware in fca-hnn
1 compromised version
- Mar 24, 2023
Malware in fb-chat-api2
1 compromised version
Page 6331 of 6,645