Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,214 total in npm · sorted newest first- Feb 25, 2023
Malicious code in discord.js-hakaix (npm)
- Feb 25, 2023
Malicious code in discord.js-hakaiw (npm)
- Feb 25, 2023
Malicious code in discord.js-hakai-v2 (npm)
- Feb 25, 2023
Malicious code in discord.js-hakai (npm)
- Feb 25, 2023
Malware in discord.js-hakai
1 compromised version
- Feb 25, 2023
Malware in hakaiz
1 compromised version
- Feb 25, 2023
Malware in discord.js-lukyy
1 compromised version
- Feb 25, 2023
Malware in discord.js-hakaix
1 compromised version
- Feb 25, 2023
Malware in discord.js-hakai-v2
1 compromised version
- Feb 25, 2023
Malware in discord.js-v12-updated
1 compromised version
- Feb 25, 2023
Malware in discord.js-hakaiw
1 compromised version
- Feb 25, 2023
Malicious code in object-color (npm)
- Feb 25, 2023
Malware in object-color
1 compromised version
- Feb 24, 2023
Malicious code in notebooklanguageserver (npm)
2 compromised versions
- Feb 24, 2023
Malicious code in azure-sp (npm)
- Feb 24, 2023
Malware in notebooklanguageserver
1 compromised version
- Feb 24, 2023
Malware in azure-sp
1 compromised version
- Feb 23, 2023
Malicious code in fca-zaaraowo (npm)
- Feb 23, 2023
Malware in fca-zaaraowo
1 compromised version
- Feb 23, 2023
Malicious code in xsstesttttttttt (npm)
- Feb 23, 2023
Malware in xsstesttttttttt
1 compromised version
- Feb 23, 2023
Malicious code in pagseguro-utils-test (npm)
- Feb 23, 2023
Malicious code in @pagseguro/stylelint-config (npm)
- Feb 23, 2023
Malicious code in @pagseguro/psit (npm)
- Feb 23, 2023
Malicious code in @pagseguro/ps-validations (npm)
- Feb 23, 2023
Malicious code in @pagseguro/ps-security-services (npm)
- Feb 23, 2023
Malicious code in @pagseguro/ps-requests-ws (npm)
- Feb 23, 2023
Malicious code in @pagseguro/ps-react-bootstrap (npm)
- Feb 23, 2023
Malicious code in @pagseguro/ps-logger (npm)
- Feb 23, 2023
Malicious code in @pagseguro/ps-crypt-js (npm)
- Feb 23, 2023
Malicious code in @pagseguro/ps-cart-recovery (npm)
- Feb 23, 2023
Malicious code in @pagseguro/ps-bootstrap (npm)
- Feb 23, 2023
Malicious code in @pagseguro/nest (npm)
- Feb 23, 2023
Malicious code in @pagseguro/eslint-config (npm)
- Feb 23, 2023
Malicious code in @pagseguro/axios-instance (npm)
- Feb 23, 2023
Malicious code in @pagseguro/pagseguro-utils (npm)
3 compromised versions
- Feb 22, 2023
Malicious code in @pagseguro/pagseguro-utils-test (npm)
1 compromised version
- Feb 21, 2023
Malware in flow-faucet
1 compromised version
- Feb 21, 2023
Malware in kuna-chart-header
1 compromised version
- Feb 21, 2023
Malware in prize-market
1 compromised version
- Feb 21, 2023
Malicious code in paysafe-wac-web-chatbot-lib-fe (npm)
- Feb 21, 2023
Malware in paysafe-wac-web-chatbot-lib-fe
1 compromised version
- Feb 20, 2023
Malicious code in jquery-mask (npm)
- Feb 20, 2023
Malicious code in fe-core-components-vuejs (npm)
- Feb 20, 2023
Malware in jquery-mask
1 compromised version
- Feb 20, 2023
Malware in fe-core-components-vuejs
1 compromised version
- Feb 20, 2023
Malicious code in prize-market (npm)
1 compromised version
- Feb 20, 2023
Malicious code in kuna-chart-header (npm)
2 compromised versions
- Feb 20, 2023
Malicious code in flow-faucet (npm)
1 compromised version
- Feb 18, 2023
Malicious code in attribution-project (npm)
Page 6335 of 6,645