Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,214 total in npm · sorted newest first- Oct 31, 2022
Malicious code in waffles-next-doc-site (npm)
- Oct 31, 2022
Malicious code in rdocumentation-workers (npm)
- Oct 31, 2022
Malicious code in rdocumentation-app (npm)
- Oct 31, 2022
Malicious code in codemirror-6-getting-started (npm)
- Oct 31, 2022
Malicious code in ast-viewer (npm)
- Oct 31, 2022
Malware in codemirror-6-getting-started
1 compromised version
- Oct 31, 2022
Malware in waffles-next-doc-site
1 compromised version
- Oct 31, 2022
Malware in ast-viewer
1 compromised version
- Oct 31, 2022
Malware in rdocumentation-app
1 compromised version
- Oct 31, 2022
Malware in rdocumentation-workers
1 compromised version
- Oct 31, 2022
Malware in waffles2-presentation
1 compromised version
- Oct 31, 2022
Malicious code in reviewstack (npm)
- Oct 31, 2022
Malware in reviewstack
1 compromised version
- Oct 31, 2022
Malicious code in colorajs (npm)
- Oct 31, 2022
Malware in colorajs
1 compromised version
- Oct 31, 2022
Malicious code in hardhat-modern (npm)
- Oct 31, 2022
Malicious code in hardhat-config (npm)
- Oct 31, 2022
Malware in hardhat-config
1 compromised version
- Oct 31, 2022
Malware in hardhat-modern
1 compromised version
- Oct 28, 2022
Malicious code in mailchimp-marketing (npm)
- Oct 28, 2022
Malware in mailchimp-marketing
1 compromised version
- Oct 28, 2022
Malicious code in mailchimp_transactional (npm)
- Oct 28, 2022
Malware in mailchimp_transactional
1 compromised version
- Oct 27, 2022
Malicious code in web3-update (npm)
- Oct 27, 2022
Malicious code in modern-hardhat (npm)
- Oct 27, 2022
Malware in web3-update
1 compromised version
- Oct 27, 2022
Malware in modern-hardhat
1 compromised version
- Oct 26, 2022
Malicious code in safe-nonce-7218 (npm)
- Oct 26, 2022
Malicious code in safe-nonce-6218 (npm)
- Oct 26, 2022
Malware in safe-nonce-6218
1 compromised version
- Oct 26, 2022
Malware in safe-nonce-7218
1 compromised version
- Oct 25, 2022
Malicious code in @uniswapv3/mempool (npm)
- Oct 25, 2022
Malicious code in uniswaptokens (npm)
- Oct 25, 2022
Malicious code in etherscantokens (npm)
- Oct 25, 2022
Malware in etherscantokens
1 compromised version
- Oct 25, 2022
Malware in uniswaptokens
1 compromised version
- Oct 25, 2022
Malware in @uniswapv3/mempool
1 compromised version
- Oct 25, 2022
Malicious code in aries-askar-shared (npm)
- Oct 25, 2022
Malware in aries-askar-shared
1 compromised version
- Oct 25, 2022
Malicious code in @paid-cloud/contracts (npm)
- Oct 25, 2022
Malware in @paid-cloud/contracts
1 compromised version
- Oct 24, 2022
Malicious code in tttestsupport-common (npm)
- Oct 24, 2022
Malicious code in s3mock-testsupport-common (npm)
- Oct 24, 2022
Malicious code in pig_13_prod (npm)
- Oct 24, 2022
Malicious code in maven-fluido-skin (npm)
- Oct 24, 2022
Malicious code in maven-compiler-plugin (npm)
- Oct 24, 2022
Malware in pig_13_prod
1 compromised version
- Oct 24, 2022
Malware in tttestsupport-common
1 compromised version
- Oct 24, 2022
Malware in maven-compiler-plugin
1 compromised version
- Oct 24, 2022
Malware in s3mock-testsupport-common
1 compromised version
Page 6353 of 6,645