Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 25, 2022
Malware in bscscan.com
1 compromised version
- Jul 25, 2022
Malicious code in liquiditypool (npm)
- Jul 25, 2022
Malicious code in etherscan.io (npm)
- Jul 25, 2022
Malware in etherscan.io
1 compromised version
- Jul 25, 2022
Malware in liquiditypool
1 compromised version
- Jul 25, 2022
Malicious code in rv-modal-store (npm)
- Jul 25, 2022
Malicious code in nishant-ok-angularjs (npm)
- Jul 25, 2022
Malicious code in fk-react-lottie-player (npm)
- Jul 25, 2022
Malicious code in epm-rdpt-angularjs (npm)
- Jul 25, 2022
Malware in fk-react-lottie-player
1 compromised version
- Jul 25, 2022
Malware in rv-modal-store
1 compromised version
- Jul 25, 2022
Malware in epm-rdpt-angularjs
1 compromised version
- Jul 25, 2022
Malware in nishant-ok-angularjs
1 compromised version
- Jul 25, 2022
Malicious code in make-discord-app (npm)
- Jul 25, 2022
Malware in make-discord-app
1 compromised version
- Jul 25, 2022
Malicious code in discord-intents-remover (npm)
- Jul 25, 2022
Malware in discord-intents-remover
1 compromised version
- Jul 25, 2022
Malicious code in proc-title (npm)
- Jul 25, 2022
Malware in proc-title
1 compromised version
- Jul 25, 2022
Malicious code in discord-antiflag (npm)
- Jul 25, 2022
Malware in discord-antiflag
1 compromised version
- Jul 25, 2022
Malicious code in notion-intl (npm)
- Jul 25, 2022
Malware in notion-intl
1 compromised version
- Jul 25, 2022
Malicious code in gather-electron-interop (npm)
- Jul 25, 2022
Malware in gather-electron-interop
1 compromised version
- Jul 25, 2022
Malicious code in nodebb-theme-opera (npm)
- Jul 25, 2022
Malware in nodebb-theme-opera
1 compromised version
- Jul 25, 2022
Malicious code in antd-form-design (npm)
- Jul 25, 2022
Malware in antd-form-design
1 compromised version
- Jul 25, 2022
Malicious code in @cobalt-team/support-email (npm)
3 compromised versions
- Jul 25, 2022
Malicious code in @cobalt-team/multi-invite (npm)
4 compromised versions
- Jul 25, 2022
Malware in @cobalt-team/support-email
1 compromised version
- Jul 25, 2022
Malware in @cobalt-team/multi-invite
1 compromised version
- Jul 25, 2022
Malicious code in discord-badge (npm)
2 compromised versions
- Jul 25, 2022
Malicious code in colors-1.2.0 (npm)
- Jul 25, 2022
Malware in discord-badge
1 compromised version
- Jul 25, 2022
Malware in colors-1.2.0
1 compromised version
- Jul 25, 2022
Malicious code in route-sonar (npm)
- Jul 25, 2022
Malware in route-sonar
1 compromised version
- Jul 25, 2022
Malicious code in bitmovin-internal (npm)
- Jul 25, 2022
Malware in bitmovin-internal
1 compromised version
- Jul 25, 2022
Malicious code in wm-shared-consts (npm)
- Jul 25, 2022
Malicious code in wm-dagre (npm)
- Jul 25, 2022
Malicious code in wm-accounts-sdk (npm)
- Jul 25, 2022
Malicious code in wm-accounts-auth-core (npm)
- Jul 25, 2022
Malicious code in wm-accounts-auth (npm)
- Jul 25, 2022
Malware in wm-accounts-sdk
1 compromised version
- Jul 25, 2022
Malware in wm-accounts-auth-core
1 compromised version
- Jul 25, 2022
Malware in wm-shared-consts
1 compromised version
- Jul 25, 2022
Malware in wm-accounts-auth
1 compromised version
Page 6399 of 6,634