Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,214 total in npm · sorted newest first- Oct 19, 2022
Malicious code in @nexthink/investigations-editor (npm)
- Oct 19, 2022
Malicious code in @nexthink/investigations-components (npm)
- Oct 19, 2022
Malicious code in @nexthink/flow-fe (npm)
- Oct 19, 2022
Malicious code in @nexthink/engage-widgets (npm)
- Oct 19, 2022
Malicious code in @nexthink/engage-branding (npm)
- Oct 19, 2022
Malicious code in @nexthink/ea-widgets (npm)
- Oct 19, 2022
Malicious code in @nexthink/data-formatter (npm)
- Oct 19, 2022
Malicious code in @nexthink/content-sharing (npm)
- Oct 19, 2022
Malicious code in @nexthink/content-admin-list (npm)
- Oct 19, 2022
Malicious code in @nexthink/arm-jwt-decoder (npm)
- Oct 19, 2022
Malicious code in @nexthink/apollo-components (npm)
- Oct 19, 2022
Malware in @nexthink/flow-fe
1 compromised version
- Oct 19, 2022
Malware in @nexthink/content-admin-list
1 compromised version
- Oct 19, 2022
Malware in @nexthink/waas
1 compromised version
- Oct 19, 2022
Malware in @nexthink/data-formatter
1 compromised version
- Oct 19, 2022
Malware in @nexthink/remote-action-widgets
1 compromised version
- Oct 19, 2022
Malware in @nexthink/investigations-editor
1 compromised version
- Oct 19, 2022
Malware in @nexthink/arm-jwt-decoder
1 compromised version
- Oct 19, 2022
Malware in @nexthink/investigations-components
1 compromised version
- Oct 19, 2022
Malware in @nexthink/apollo-components
1 compromised version
- Oct 19, 2022
Malware in @nexthink/nql-editor
1 compromised version
- Oct 19, 2022
Malware in @nexthink/nxassignment
1 compromised version
- Oct 19, 2022
Malware in @nexthink/engage-widgets
1 compromised version
- Oct 19, 2022
Malware in @nexthink/nxnavigation
1 compromised version
- Oct 19, 2022
Malware in @nexthink/investigations-widgets
1 compromised version
- Oct 19, 2022
Malware in @nexthink/content-sharing
1 compromised version
- Oct 19, 2022
Malware in @nexthink/kendo-react
1 compromised version
- Oct 19, 2022
Malware in @nexthink/ea-widgets
1 compromised version
- Oct 19, 2022
Malware in @nexthink/engage-branding
1 compromised version
- Oct 19, 2022
Malicious code in @nexthink/arm-claims-library (npm)
- Oct 19, 2022
Malicious code in @nexthink/apollo-widgets (npm)
- Oct 19, 2022
Malicious code in @nexthink/apollo-tokens (npm)
- Oct 19, 2022
Malware in @nexthink/apollo-tokens
1 compromised version
- Oct 19, 2022
Malware in @nexthink/arm-claims-library
1 compromised version
- Oct 19, 2022
Malware in @nexthink/apollo-widgets
1 compromised version
- Oct 19, 2022
Malicious code in reactive-cashflow (npm)
- Oct 19, 2022
Malware in reactive-cashflow
1 compromised version
- Oct 17, 2022
Malicious code in trin-axios (npm)
- Oct 17, 2022
Malware in trin-axios
1 compromised version
- Oct 12, 2022
Malicious code in discord.js13-selfbot (npm)
- Oct 12, 2022
Malware in discord.js13-selfbot
1 compromised version
- Oct 11, 2022
Malicious code in path-core (npm)
- Oct 11, 2022
Malware in path-core
1 compromised version
- Oct 10, 2022
Malicious code in 4ff-lib-foundation (npm)
- Oct 10, 2022
Malware in 4ff-lib-foundation
1 compromised version
- Oct 7, 2022
Malicious code in wasm-ion-schema-test (npm)
- Oct 7, 2022
Malware in wasm-ion-schema-test
1 compromised version
- Oct 7, 2022
Malicious code in bmt-web-common (npm)
- Oct 7, 2022
Malware in bmt-web-common
1 compromised version
- Oct 5, 2022
Malicious code in iconape (npm)
Page 6355 of 6,645