Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,218 total in npm · sorted newest first- Mar 23, 2023
Malicious code in @xivart/lumberjack (npm)
8 compromised versions
- Mar 23, 2023
Malicious code in @xivart/edge (npm)
7 compromised versions
- Mar 23, 2023
Malware in @xivart/lumberjack
1 compromised version
- Mar 23, 2023
Malware in @xivart/edge
1 compromised version
- Mar 23, 2023
Malicious code in @xivart/tangram (npm)
9 compromised versions
- Mar 23, 2023
Malware in @xivart/tangram
1 compromised version
- Mar 23, 2023
Malicious code in @miro-site/core (npm)
- Mar 23, 2023
Malware in @miro-site/core
1 compromised version
- Mar 23, 2023
Malicious code in @miro-site/ui-core (npm)
- Mar 23, 2023
Malicious code in @miro-site/localization (npm)
- Mar 23, 2023
Malicious code in @miro-site/features-standard-header (npm)
- Mar 23, 2023
Malware in @miro-site/features-standard-header
1 compromised version
- Mar 23, 2023
Malware in @miro-site/ui-core
1 compromised version
- Mar 23, 2023
Malware in @miro-site/localization
1 compromised version
- Mar 21, 2023
Malicious code in ikemurami-di (npm)
- Mar 21, 2023
Malware in ikemurami-di
1 compromised version
- Mar 21, 2023
Malicious code in starbuckssystem (npm)
- Mar 21, 2023
Malware in starbuckssystem
1 compromised version
- Mar 16, 2023
Malicious code in @sok-brand-sites/common-frontend-components (npm)
10 compromised versions
- Mar 16, 2023
Malware in @sok-brand-sites/common-frontend-components
1 compromised version
- Mar 16, 2023
Malicious code in azure-sdk-fly (npm)
1 compromised version
- Mar 16, 2023
Malware in azure-sdk-fly
1 compromised version
- Mar 16, 2023
Malicious code in teams-calendar-webpart (npm)
1 compromised version
- Mar 16, 2023
Malicious code in sp-yammer-common (npm)
1 compromised version
- Mar 16, 2023
Malicious code in sp-home-core (npm)
- Mar 16, 2023
Malicious code in ifabric-styling-bundle (npm)
1 compromised version
- Mar 16, 2023
Malicious code in globalize-bundle (npm)
1 compromised version
- Mar 16, 2023
Malicious code in follow-ebay (npm)
1 compromised version
- Mar 16, 2023
Malicious code in core-site-speed-ebay (npm)
1 compromised version
- Mar 16, 2023
Malware in sp-yammer-common
1 compromised version
- Mar 16, 2023
Malware in globalize-bundle
1 compromised version
- Mar 16, 2023
Malware in teams-calendar-webpart
1 compromised version
- Mar 16, 2023
Malware in core-site-speed-ebay
1 compromised version
- Mar 16, 2023
Malware in follow-ebay
1 compromised version
- Mar 16, 2023
Malware in sp-home-core
1 compromised version
- Mar 16, 2023
Malware in ifabric-styling-bundle
1 compromised version
- Mar 15, 2023
Malicious code in create-zplayer-plugin (npm)
- Mar 15, 2023
Malware in create-zplayer-plugin
1 compromised version
- Mar 15, 2023
Malicious code in fca-trankhuong (npm)
- Mar 15, 2023
Malware in fca-trankhuong
1 compromised version
- Mar 15, 2023
Malicious code in ts-infra-common (npm)
4 compromised versions
- Mar 15, 2023
Malicious code in react-screen-reader-announce (npm)
4 compromised versions
- Mar 15, 2023
Malicious code in react-advanced-breadcrumbs (npm)
4 compromised versions
- Mar 15, 2023
Malicious code in npo-common (npm)
4 compromised versions
- Mar 15, 2023
Malicious code in ngx-infinite-scroll-fixed (npm)
- Mar 15, 2023
Malicious code in fluent-ui-react-latest (npm)
8 compromised versions
- Mar 15, 2023
Malicious code in devcenter-internal-stable (npm)
8 compromised versions
- Mar 15, 2023
Malicious code in devcenter-internal-beta (npm)
8 compromised versions
- Mar 15, 2023
Malicious code in cms-ui-views (npm)
8 compromised versions
- Mar 15, 2023
Malicious code in cms-ui-redux (npm)
8 compromised versions
Page 6332 of 6,645