Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,214 total in npm · sorted newest first- Feb 7, 2023
Malicious code in thenamk3zg (npm)
- Feb 7, 2023
Malicious code in thenamk3z (npm)
- Feb 7, 2023
Malicious code in thenamk3 (npm)
- Feb 7, 2023
Malicious code in nemz (npm)
- Feb 7, 2023
Malware in thenamk3zg
1 compromised version
- Feb 7, 2023
Malware in thenamk3z
1 compromised version
- Feb 7, 2023
Malware in nemz
1 compromised version
- Feb 7, 2023
Malware in thenamk3
1 compromised version
- Feb 7, 2023
Malicious code in angular-portal-dependencies (npm)
- Feb 7, 2023
Malware in angular-portal-dependencies
1 compromised version
- Feb 7, 2023
Malware in samuelpoctester
1 compromised version
- Feb 7, 2023
Malicious code in @bingads-webui-campaign/facebook-import-page (npm)
- Feb 7, 2023
Malicious code in @bingads-webui-campaign/accounts-grid (npm)
- Feb 7, 2023
Malware in @bingads-webui-campaign/facebook-import-page
1 compromised version
- Feb 7, 2023
Malware in @bingads-webui-campaign/accounts-grid
1 compromised version
- Feb 7, 2023
Malicious code in dhf-horizon-synthesis (npm)
- Feb 7, 2023
Malware in dhf-horizon-synthesis
1 compromised version
- Feb 6, 2023
Malicious code in reload-glob (npm)
1 compromised version
- Feb 6, 2023
Malware in reload-glob
1 compromised version
- Feb 6, 2023
Malicious code in bolt-scripts (npm)
- Feb 6, 2023
Malware in bolt-scripts
1 compromised version
- Feb 6, 2023
Malicious code in fca-ciaro (npm)
- Feb 6, 2023
Malicious code in fca-anjelo-pogi (npm)
- Feb 6, 2023
Malware in fca-anjelo-pogi
1 compromised version
- Feb 6, 2023
Malware in fca-ciaro
1 compromised version
- Feb 6, 2023
Malicious code in ban-notifier (npm)
- Feb 6, 2023
Malware in ban-notifier
1 compromised version
- Feb 6, 2023
Malicious code in private-dependency-test3 (npm)
- Feb 6, 2023
Malware in private-dependency-test3
1 compromised version
- Feb 6, 2023
Malicious code in ftvi-meteo-frontend (npm)
- Feb 6, 2023
Malware in ftvi-meteo-frontend
1 compromised version
- Feb 6, 2023
Malicious code in @gumtree/ui-library (npm)
- Feb 6, 2023
Malware in @gumtree/ui-library
1 compromised version
- Feb 6, 2023
Malicious code in action-destinations (npm)
3 compromised versions
- Feb 6, 2023
Malicious code in recurly-dev (npm)
2 compromised versions
- Feb 6, 2023
Malicious code in instantsearch-web (npm)
1 compromised version
- Feb 6, 2023
Malware in recurly-dev
1 compromised version
- Feb 6, 2023
Malware in instantsearch-web
1 compromised version
- Feb 6, 2023
Malware in action-destinations
1 compromised version
- Feb 6, 2023
Malicious code in fc-address-lookup (npm)
- Feb 6, 2023
Malicious code in fc-account-selector (npm)
1 compromised version
- Feb 6, 2023
Malware in fc-address-lookup
1 compromised version
- Feb 6, 2023
Malware in fc-account-selector
1 compromised version
- Feb 6, 2023
Malicious code in yellowbrain (npm)
- Feb 6, 2023
Malicious code in testnebb (npm)
1 compromised version
- Feb 6, 2023
Malicious code in testneb (npm)
- Feb 6, 2023
Malicious code in testben (npm)
- Feb 6, 2023
Malware in testneb
1 compromised version
- Feb 6, 2023
Malware in testnebb
1 compromised version
- Feb 6, 2023
Malware in yellowbrain
1 compromised version
Page 6337 of 6,645