Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,214 total in npm · sorted newest first- Dec 7, 2022
Malware in testherejson
1 compromised version
- Dec 7, 2022
Malware in securityrele
1 compromised version
- Dec 7, 2022
Malware in hiljsonhil
1 compromised version
- Dec 7, 2022
Malicious code in pv_ho3ein (npm)
- Dec 7, 2022
Malicious code in hossein_lib (npm)
- Dec 7, 2022
Malware in pv_ho3ein
1 compromised version
- Dec 7, 2022
Malware in hossein_lib
1 compromised version
- Dec 7, 2022
Malicious code in imagecompress-mini (npm)
- Dec 7, 2022
Malware in imagecompress-mini
1 compromised version
- Dec 7, 2022
Malicious code in tcm-one-tree (npm)
- Dec 7, 2022
Malware in tcm-one-tree
1 compromised version
- Dec 7, 2022
Malicious code in @ebx-ui/ebx-ui-component-library-sdk (npm)
- Dec 7, 2022
Malware in @ebx-ui/ebx-ui-component-library-sdk
1 compromised version
- Dec 6, 2022
Malicious code in package-ion (npm)
1 compromised version
- Dec 6, 2022
Malicious code in ionpackages (npm)
1 compromised version
- Dec 6, 2022
Malicious code in ion-package (npm)
1 compromised version
- Dec 6, 2022
Malicious code in icon-ionicons (npm)
1 compromised version
- Dec 6, 2022
Malicious code in icon-ionicon (npm)
1 compromised version
- Dec 6, 2022
Malicious code in arpan-package (npm)
1 compromised version
- Dec 6, 2022
Malware in ionpackages
1 compromised version
- Dec 6, 2022
Malware in arpan-package
1 compromised version
- Dec 6, 2022
Malware in ion-package
1 compromised version
- Dec 6, 2022
Malware in icon-ionicons
1 compromised version
- Dec 6, 2022
Malware in icon-ionicon
1 compromised version
- Dec 6, 2022
Malware in package-ion
1 compromised version
- Dec 6, 2022
Malicious code in ajax-cuuu (npm)
- Dec 6, 2022
Malicious code in package-ions (npm)
1 compromised version
- Dec 6, 2022
Malicious code in ionpackagesa (npm)
1 compromised version
- Dec 6, 2022
Malware in ajax-cuuu
1 compromised version
- Dec 6, 2022
Malware in package-ions
1 compromised version
- Dec 6, 2022
Malware in ionpackagesa
1 compromised version
- Dec 5, 2022
Malicious code in cors.js (npm)
- Dec 5, 2022
Malicious code in cors-2.8.5 (npm)
- Dec 5, 2022
Malware in cors-2.8.5
1 compromised version
- Dec 5, 2022
Malware in cors.js
1 compromised version
- Dec 5, 2022
Malicious code in antiheck (npm)
- Dec 5, 2022
Malware in antiheck
1 compromised version
- Dec 5, 2022
Malicious code in test-package-dependencyconfusion (npm)
- Dec 5, 2022
Malware in test-package-dependencyconfusion
1 compromised version
- Nov 29, 2022
Malicious code in test-draco (npm)
- Nov 29, 2022
Malicious code in microsoft-data-mapper-vscode-extension (npm)
- Nov 29, 2022
Malicious code in ipcode (npm)
- Nov 29, 2022
Malicious code in cnscodes (npm)
- Nov 29, 2022
Malicious code in cnscode (npm)
- Nov 29, 2022
Malware in test-draco
1 compromised version
- Nov 29, 2022
Malware in cnscode
1 compromised version
- Nov 29, 2022
Malware in cnscodes
1 compromised version
- Nov 29, 2022
Malware in ipcode
1 compromised version
- Nov 29, 2022
Malware in microsoft-data-mapper-vscode-extension
1 compromised version
- Nov 25, 2022
Malicious code in @vendavo/pezzi (npm)
Page 6350 of 6,645