Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 26, 2022
Malware in ovhcatalogs
1 compromised version
- Jul 26, 2022
Malicious code in @ovh-ui/oui-spinner (npm)
- Jul 26, 2022
Malicious code in @ovh-ui/oui-pagination (npm)
- Jul 26, 2022
Malware in @ovh-ui/oui-pagination
1 compromised version
- Jul 26, 2022
Malware in @ovh-ui/oui-spinner
1 compromised version
- Jul 26, 2022
Malicious code in @ovh-ui/oui-criteria (npm)
- Jul 26, 2022
Malware in @ovh-ui/oui-criteria
1 compromised version
- Jul 26, 2022
Malicious code in postman-echo-nock (npm)
- Jul 26, 2022
Malicious code in nsmalkasm (npm)
- Jul 26, 2022
Malicious code in eslint-plugin-internal (npm)
- Jul 26, 2022
Malware in eslint-plugin-internal
1 compromised version
- Jul 26, 2022
Malware in postman-echo-nock
1 compromised version
- Jul 26, 2022
Malware in nsmalkasm
1 compromised version
- Jul 26, 2022
Malicious code in volpino-italiano-content (npm)
- Jul 26, 2022
Malicious code in treeing-cur-content (npm)
- Jul 26, 2022
Malicious code in shiba-inu-technologies (npm)
- Jul 26, 2022
Malicious code in pug-web-readiness (npm)
- Jul 26, 2022
Malicious code in my-very-first-own-package (npm)
- Jul 26, 2022
Malicious code in bulldog-e-business (npm)
- Jul 26, 2022
Malicious code in austrian-black-and-tan-hound-platforms (npm)
- Jul 26, 2022
Malware in shiba-inu-technologies
1 compromised version
- Jul 26, 2022
Malware in austrian-black-and-tan-hound-platforms
1 compromised version
- Jul 26, 2022
Malware in my-very-first-own-package
1 compromised version
- Jul 26, 2022
Malware in pug-web-readiness
1 compromised version
- Jul 26, 2022
Malware in treeing-cur-content
1 compromised version
- Jul 26, 2022
Malware in volpino-italiano-content
1 compromised version
- Jul 26, 2022
Malware in bulldog-e-business
1 compromised version
- Jul 26, 2022
Malicious code in vue-test-utils-mic (npm)
- Jul 26, 2022
Malware in vue-test-utils-mic
1 compromised version
- Jul 26, 2022
Malicious code in wetimejs-twilio-internal (npm)
- Jul 26, 2022
Malware in wetimejs-twilio-internal
1 compromised version
- Jul 25, 2022
Malicious code in wwww.etherscan.io (npm)
- Jul 25, 2022
Malicious code in www.uniswap.org (npm)
- Jul 25, 2022
Malicious code in www.etherscan.io (npm)
- Jul 25, 2022
Malicious code in www.bscscan.com (npm)
- Jul 25, 2022
Malicious code in uniswap.org (npm)
- Jul 25, 2022
Malicious code in etherscan.com (npm)
- Jul 25, 2022
Malicious code in 1inch.io (npm)
- Jul 25, 2022
Malicious code in bscscan.com (npm)
- Jul 25, 2022
Malicious code in app.uniswap.org (npm)
- Jul 25, 2022
Malicious code in app.1inch.io (npm)
- Jul 25, 2022
Malware in wwww.etherscan.io
1 compromised version
- Jul 25, 2022
Malware in 1inch.io
1 compromised version
- Jul 25, 2022
Malware in etherscan.com
1 compromised version
- Jul 25, 2022
Malware in www.etherscan.io
1 compromised version
- Jul 25, 2022
Malware in uniswap.org
1 compromised version
- Jul 25, 2022
Malware in app.1inch.io
1 compromised version
- Jul 25, 2022
Malware in app.uniswap.org
1 compromised version
- Jul 25, 2022
Malware in www.uniswap.org
1 compromised version
- Jul 25, 2022
Malware in www.bscscan.com
1 compromised version
Page 6398 of 6,634