Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 26, 2022
Malicious code in dorimedepen (npm)
- Jul 26, 2022
Malware in testdorime
1 compromised version
- Jul 26, 2022
Malware in dorimedepen
1 compromised version
- Jul 26, 2022
Malware in myfirstdependencywithserver
1 compromised version
- Jul 26, 2022
Malware in floureeb
1 compromised version
- Jul 26, 2022
Malicious code in totaralms (npm)
- Jul 26, 2022
Malware in totaralms
1 compromised version
- Jul 26, 2022
Malicious code in melar-dev-site (npm)
- Jul 26, 2022
Malicious code in design-insights (npm)
- Jul 26, 2022
Malware in design-insights
1 compromised version
- Jul 26, 2022
Malware in melar-dev-site
1 compromised version
- Jul 26, 2022
Malicious code in uber-images (npm)
- Jul 26, 2022
Malware in uber-images
1 compromised version
- Jul 26, 2022
Malicious code in uber-unify (npm)
- Jul 26, 2022
Malware in uber-unify
1 compromised version
- Jul 26, 2022
Malicious code in razer-xdk (npm)
- Jul 26, 2022
Malicious code in hyperwallet-xdk (npm)
- Jul 26, 2022
Malicious code in hyperwallet-sdk-paypal (npm)
- Jul 26, 2022
Malware in hyperwallet-sdk-paypal
1 compromised version
- Jul 26, 2022
Malware in razer-xdk
1 compromised version
- Jul 26, 2022
Malware in hyperwallet-xdk
1 compromised version
- Jul 26, 2022
Malicious code in bipiy74902-wx1 (npm)
- Jul 26, 2022
Malware in bipiy74902-wx1
1 compromised version
- Jul 26, 2022
Malicious code in ot-performance (npm)
- Jul 26, 2022
Malicious code in ot-pausedetector (npm)
- Jul 26, 2022
Malicious code in ot-menu-test (npm)
- Jul 26, 2022
Malicious code in ot-logger (npm)
- Jul 26, 2022
Malicious code in ot-daily-algorithm (npm)
- Jul 26, 2022
Malicious code in create-ot-express-app (npm)
- Jul 26, 2022
Malware in create-ot-express-app
1 compromised version
- Jul 26, 2022
Malware in ot-logger
1 compromised version
- Jul 26, 2022
Malware in ot-daily-algorithm
1 compromised version
- Jul 26, 2022
Malware in ot-pausedetector
1 compromised version
- Jul 26, 2022
Malware in ot-performance
1 compromised version
- Jul 26, 2022
Malware in ot-menu-test
1 compromised version
- Jul 26, 2022
Malicious code in stringjs_lib (npm)
- Jul 26, 2022
Malware in stringjs_lib
1 compromised version
- Jul 26, 2022
Malicious code in chat-orion-sdk (npm)
- Jul 26, 2022
Malware in chat-orion-sdk
1 compromised version
- Jul 26, 2022
Malicious code in mongodb-stitch-browser-testutils (npm)
- Jul 26, 2022
Malware in mongodb-stitch-browser-testutils
1 compromised version
- Jul 26, 2022
Malicious code in ys-mozi-metrics (npm)
- Jul 26, 2022
Malicious code in mozi-metrics (npm)
- Jul 26, 2022
Malware in mozi-metrics
1 compromised version
- Jul 26, 2022
Malware in ys-mozi-metrics
1 compromised version
- Jul 26, 2022
Malicious code in ovhcatalogs (npm)
- Jul 26, 2022
Malicious code in order-link-builder (npm)
- Jul 26, 2022
Malicious code in dedicated-servers (npm)
- Jul 26, 2022
Malware in dedicated-servers
1 compromised version
- Jul 26, 2022
Malware in order-link-builder
1 compromised version
Page 6397 of 6,634