Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,214 total in npm · sorted newest first- Jan 26, 2023
Malicious code in flip-flop-flip (npm)
- Jan 26, 2023
Malicious code in flip-flop-flap (npm)
- Jan 26, 2023
Malware in flip-flop-flop
1 compromised version
- Jan 26, 2023
Malware in flip-flop-flap
1 compromised version
- Jan 26, 2023
Malware in flip-flop-flip
1 compromised version
- Jan 26, 2023
Malicious code in biputils (npm)
- Jan 26, 2023
Malware in biputils
1 compromised version
- Jan 26, 2023
Malicious code in @blk/idm-okta-sdk-js (npm)
- Jan 26, 2023
Malware in @blk/idm-okta-sdk-js
1 compromised version
- Jan 26, 2023
Malicious code in uitk-build-tasks (npm)
1 compromised version
- Jan 26, 2023
Malware in uitk-build-tasks
1 compromised version
- Jan 25, 2023
Malicious code in androidparanoidpresentationpackage (npm)
- Jan 25, 2023
Malicious code in andr0idp4r4n0id_presentation_package_1 (npm)
- Jan 25, 2023
Malicious code in attacker_present_helloworld (npm)
- Jan 25, 2023
Malware in attacker_present_helloworld
1 compromised version
- Jan 25, 2023
Malware in androidparanoidpresentationpackage
1 compromised version
- Jan 25, 2023
Malware in andr0idp4r4n0id_presentation_package_1
1 compromised version
- Jan 24, 2023
Malicious code in testing-postinstall (npm)
- Jan 24, 2023
Malware in testing-postinstall
1 compromised version
- Jan 24, 2023
Malicious code in node-config-server-utils (npm)
- Jan 24, 2023
Malicious code in brbrbr (npm)
- Jan 24, 2023
Malware in node-config-server-utils
1 compromised version
- Jan 24, 2023
Malware in brbrbr
1 compromised version
- Jan 23, 2023
Malicious code in bi0s-css-3bd27 (npm)
- Jan 23, 2023
Malware in bi0s-css-3bd27
1 compromised version
- Jan 20, 2023
Malicious code in best-man-fast (npm)
- Jan 20, 2023
Malware in best-man-fast
1 compromised version
- Jan 20, 2023
Malicious code in best-man-loop (npm)
- Jan 20, 2023
Malicious code in best-man-good (npm)
- Jan 20, 2023
Malicious code in best-man-fine (npm)
- Jan 20, 2023
Malware in best-man-fine
1 compromised version
- Jan 20, 2023
Malware in best-man-loop
1 compromised version
- Jan 20, 2023
Malware in best-man-good
1 compromised version
- Jan 18, 2023
Malicious code in trovam (npm)
- Jan 18, 2023
Malicious code in trova (npm)
- Jan 18, 2023
Malicious code in speedtestzo (npm)
- Jan 18, 2023
Malicious code in speedtestwow (npm)
- Jan 18, 2023
Malicious code in speedtestspa (npm)
- Jan 18, 2023
Malicious code in speedtestsolo (npm)
- Jan 18, 2023
Malicious code in speedtestrun (npm)
- Jan 18, 2023
Malicious code in speedtesto (npm)
- Jan 18, 2023
Malicious code in speedtestkas (npm)
- Jan 18, 2023
Malicious code in speedtestis (npm)
- Jan 18, 2023
Malicious code in speedtestgod (npm)
- Jan 18, 2023
Malicious code in speedtestgo (npm)
- Jan 18, 2023
Malicious code in speedtestfast (npm)
- Jan 18, 2023
Malicious code in speedtestcliz (npm)
- Jan 18, 2023
Malicious code in speedtestclix (npm)
- Jan 18, 2023
Malicious code in speedtestbom (npm)
- Jan 18, 2023
Malicious code in speedtesta (npm)
Page 6344 of 6,645