Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,214 total in npm · sorted newest first- Feb 6, 2023
Malware in testben
1 compromised version
- Feb 5, 2023
Malicious code in @tangoch/add-two (npm)
1 compromised version
- Feb 5, 2023
Malware in @tangoch/add-two
1 compromised version
- Feb 5, 2023
Malicious code in png-export (npm)
- Feb 5, 2023
Malicious code in non-secure (npm)
- Feb 5, 2023
Malware in png-export
1 compromised version
- Feb 5, 2023
Malware in non-secure
1 compromised version
- Feb 5, 2023
Malicious code in @buffer-mono/non-secure (npm)
- Feb 5, 2023
Malware in @buffer-mono/non-secure
1 compromised version
- Feb 5, 2023
Malicious code in @buffer-mono/png-export (npm)
- Feb 5, 2023
Malware in @buffer-mono/png-export
1 compromised version
- Feb 5, 2023
Malicious code in vpro-dev (npm)
1 compromised version
- Feb 5, 2023
Malware in digital-staticsite
1 compromised version
- Feb 5, 2023
Malware in reporter-app-dist
1 compromised version
- Feb 5, 2023
Malware in vpro-dev
1 compromised version
- Feb 4, 2023
Malicious code in test-npm-com-test (npm)
1 compromised version
- Feb 4, 2023
Malicious code in kaluza-careers (npm)
- Feb 4, 2023
Malicious code in reporter-app-dist (npm)
6 compromised versions
- Feb 4, 2023
Malicious code in digital-staticsite (npm)
- Feb 3, 2023
Malicious code in ts-messenger-api-v2 (npm)
- Feb 3, 2023
Malicious code in fca-disme (npm)
- Feb 3, 2023
Malicious code in deobfuscatorv2 (npm)
- Feb 3, 2023
Malware in deobfuscatorv2
1 compromised version
- Feb 3, 2023
Malware in ts-messenger-api-v2
1 compromised version
- Feb 3, 2023
Malware in fca-disme
1 compromised version
- Feb 3, 2023
Malicious code in rmbg-disme (npm)
- Feb 3, 2023
Malicious code in fca-hrz-remake (npm)
- Feb 3, 2023
Malware in fca-hrz-remake
1 compromised version
- Feb 3, 2023
Malware in rmbg-disme
1 compromised version
- Feb 3, 2023
Malicious code in allianz-icons (npm)
2 compromised versions
- Feb 3, 2023
Malware in allianz-icons
1 compromised version
- Feb 3, 2023
Malicious code in samuelpoctester (npm)
- Feb 2, 2023
Malicious code in dataminr-core (npm)
- Feb 2, 2023
Malware in dataminr-core
1 compromised version
- Feb 2, 2023
Malicious code in dataminr-instrument (npm)
- Feb 2, 2023
Malware in dataminr-instrument
1 compromised version
- Feb 2, 2023
Malicious code in status-proxy (npm)
3 compromised versions
- Feb 2, 2023
Malicious code in pooled-redis (npm)
1 compromised version
- Feb 2, 2023
Malicious code in mypy-action (npm)
1 compromised version
- Feb 2, 2023
Malicious code in johnnygaddarr (npm)
- Feb 2, 2023
Malicious code in hellosign-embedded-cla (npm)
1 compromised version
- Feb 2, 2023
Malicious code in dwolla-algolia-search (npm)
2 compromised versions
- Feb 2, 2023
Malicious code in codeceptjs-browserstack (npm)
- Feb 2, 2023
Malicious code in cloud-functions-apply-gce-sizing-recommendations (npm)
- Feb 2, 2023
Malicious code in bykea_node_boilerplate (npm)
- Feb 2, 2023
Malware in hellosign-embedded-cla
1 compromised version
- Feb 2, 2023
Malware in dwolla-algolia-search
1 compromised version
- Feb 2, 2023
Malware in cloud-functions-apply-gce-sizing-recommendations
1 compromised version
- Feb 2, 2023
Malware in codeceptjs-browserstack
1 compromised version
- Feb 2, 2023
Malware in bykea_node_boilerplate
1 compromised version
Page 6338 of 6,645