Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,214 total in npm · sorted newest first- Nov 10, 2022
Malware in @dbk-legacy/roster-modules-ebanking
1 compromised version
- Nov 9, 2022
Malicious code in tsp-sdk (npm)
- Nov 9, 2022
Malicious code in shopee-ui-react (npm)
- Nov 9, 2022
Malicious code in seller-listing-service (npm)
- Nov 9, 2022
Malicious code in seller-base-service (npm)
- Nov 9, 2022
Malware in seller-listing-service
1 compromised version
- Nov 9, 2022
Malware in shopee-ui-react
1 compromised version
- Nov 9, 2022
Malware in tsp-sdk
1 compromised version
- Nov 9, 2022
Malware in seller-base-service
1 compromised version
- Nov 8, 2022
Malicious code in mai-pro (npm)
- Nov 8, 2022
Malware in mai-pro
1 compromised version
- Nov 7, 2022
Malicious code in hosseinp (npm)
- Nov 7, 2022
Malicious code in hosseinc (npm)
- Nov 7, 2022
Malware in hosseinc
1 compromised version
- Nov 7, 2022
Malware in hosseinp
1 compromised version
- Nov 7, 2022
Malicious code in addon-kit (npm)
- Nov 7, 2022
Malicious code in vulnerablbsusuendency (npm)
- Nov 7, 2022
Malicious code in toolbox_expose (npm)
- Nov 7, 2022
Malicious code in theme_manager_base (npm)
- Nov 7, 2022
Malicious code in syntax_manager (npm)
- Nov 7, 2022
Malicious code in skywriter_server (npm)
- Nov 7, 2022
Malicious code in jquery_ui_checkbox (npm)
- Nov 7, 2022
Malicious code in jquery_ui_checkbowwx (npm)
- Nov 7, 2022
Malicious code in hemoabsihh12 (npm)
- Nov 7, 2022
Malicious code in edit_session (npm)
- Nov 7, 2022
Malware in edit_session
1 compromised version
- Nov 7, 2022
Malware in toolbox_expose
1 compromised version
- Nov 7, 2022
Malware in vulnerablbsusuendency
1 compromised version
- Nov 7, 2022
Malware in skywriter_server
1 compromised version
- Nov 7, 2022
Malware in syntax_manager
1 compromised version
- Nov 7, 2022
Malware in theme_manager_base
1 compromised version
- Nov 7, 2022
Malware in jquery_ui_checkbowwx
1 compromised version
- Nov 7, 2022
Malware in addon-kit
1 compromised version
- Nov 7, 2022
Malware in hemoabsihh12
1 compromised version
- Nov 7, 2022
Malware in jquery_ui_checkbox
1 compromised version
- Nov 7, 2022
Malicious code in xv_chrome (npm)
- Nov 7, 2022
Malware in xv_chrome
1 compromised version
- Nov 7, 2022
Malicious code in mantis-ui (npm)
- Nov 7, 2022
Malware in mantis-ui
1 compromised version
- Nov 3, 2022
Malicious code in esperamier (npm)
- Nov 3, 2022
Malicious code in bc-demo (npm)
- Nov 3, 2022
Malware in esperamier
1 compromised version
- Nov 3, 2022
Malware in bc-demo
1 compromised version
- Oct 31, 2022
Malicious code in @uniswapv2/mempool (npm)
- Oct 31, 2022
Malware in @uniswapv2/mempool
1 compromised version
- Oct 31, 2022
Malicious code in richsite (npm)
- Oct 31, 2022
Malware in richsite
1 compromised version
- Oct 31, 2022
Malicious code in we-lib-login-tgp (npm)
- Oct 31, 2022
Malware in we-lib-login-tgp
1 compromised version
- Oct 31, 2022
Malicious code in waffles2-presentation (npm)
Page 6352 of 6,645