Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,218 total in npm · sorted newest first- Mar 6, 2023
Malicious code in opium-contracts (npm)
- Mar 6, 2023
Malware in opium-contracts
1 compromised version
- Mar 6, 2023
Malicious code in web-ui-design-tokens (npm)
- Mar 6, 2023
Malicious code in owa-trace (npm)
- Mar 6, 2023
Malicious code in owa-theme (npm)
- Mar 6, 2023
Malicious code in owa-strings (npm)
- Mar 6, 2023
Malicious code in owa-sprite (npm)
- Mar 6, 2023
Malicious code in owa-fabric-theme (npm)
- Mar 6, 2023
Malware in web-ui-design-tokens
1 compromised version
- Mar 6, 2023
Malware in owa-sprite
1 compromised version
- Mar 6, 2023
Malware in owa-fabric-theme
1 compromised version
- Mar 6, 2023
Malware in owa-theme
1 compromised version
- Mar 6, 2023
Malware in owa-trace
1 compromised version
- Mar 6, 2023
Malware in owa-strings
1 compromised version
- Mar 6, 2023
Malicious code in axios-proxy (npm)
- Mar 6, 2023
Malware in axios-proxy
1 compromised version
- Mar 6, 2023
Malicious code in ing-feat-chat-components (npm)
1 compromised version
- Mar 6, 2023
Malware in ing-feat-chat-components
1 compromised version
- Mar 6, 2023
Malicious code in ing-feat-customer-video (npm)
- Mar 6, 2023
Malware in ing-feat-customer-video
1 compromised version
- Mar 4, 2023
Malicious code in lime-web-component-interfaces (npm)
1 compromised version
- Mar 1, 2023
Malicious code in hardhat-web3-utility (npm)
- Mar 1, 2023
Malicious code in hardhat-web3-deploy (npm)
- Mar 1, 2023
Malicious code in hardhat-manager (npm)
- Mar 1, 2023
Malware in hardhat-web3-deploy
1 compromised version
- Mar 1, 2023
Malware in hardhat-web3-utility
1 compromised version
- Mar 1, 2023
Malware in hardhat-manager
1 compromised version
- Mar 1, 2023
Malicious code in hardhat-manage (npm)
- Mar 1, 2023
Malware in hardhat-manage
1 compromised version
- Mar 1, 2023
Malicious code in vmw-atk (npm)
- Mar 1, 2023
Malicious code in nokia-smp (npm)
2 compromised versions
- Mar 1, 2023
Malware in vmw-atk
1 compromised version
- Mar 1, 2023
Malware in nokia-smp
1 compromised version
- Feb 28, 2023
Malicious code in tsang-dev (npm)
- Feb 28, 2023
Malware in tsang-dev
1 compromised version
- Feb 28, 2023
Malicious code in fca-sang-remake (npm)
- Feb 28, 2023
Malicious code in fca-sang-dev (npm)
- Feb 28, 2023
Malware in fca-sang-remake
1 compromised version
- Feb 28, 2023
Malware in fca-sang-dev
1 compromised version
- Feb 28, 2023
Malicious code in xman-internal (npm)
- Feb 28, 2023
Malware in xman-internal
1 compromised version
- Feb 27, 2023
Malicious code in tpk-fca (npm)
- Feb 27, 2023
Malicious code in fca-tpk-vip (npm)
- Feb 27, 2023
Malware in tpk-fca
1 compromised version
- Feb 27, 2023
Malware in fca-tpk-vip
1 compromised version
- Feb 27, 2023
Malicious code in fca-kenlie-plays (npm)
- Feb 27, 2023
Malware in fca-kenlie-plays
1 compromised version
- Feb 27, 2023
Malicious code in fca-aliya-anup (npm)
- Feb 27, 2023
Malware in fca-aliya-anup
1 compromised version
- Feb 25, 2023
Malicious code in discord-colors (npm)
Page 6334 of 6,645