Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 21, 2022
Malware in unibet_package
1 compromised version
- Jul 21, 2022
Malware in kenticodevelopmentconfiguration
1 compromised version
- Jul 21, 2022
Malware in forge-app-bones
1 compromised version
- Jul 21, 2022
Malware in nozbedesktop
1 compromised version
- Jul 21, 2022
Malware in emarketing
1 compromised version
- Jul 21, 2022
Malware in hemlibrademo1
1 compromised version
- Jul 21, 2022
Malware in starbuckssystem.website
1 compromised version
- Jul 21, 2022
Malware in promohline
1 compromised version
- Jul 21, 2022
Malware in style-guide-microsite
1 compromised version
- Jul 21, 2022
Malware in ethics
1 compromised version
- Jul 21, 2022
Malware in brandsites
1 compromised version
- Jul 21, 2022
Malware in rg-engineering
1 compromised version
- Jul 21, 2022
Malware in irisk
1 compromised version
- Jul 21, 2022
Malware in ua-publication-manager
1 compromised version
- Jul 21, 2022
Malware in hyatt-mumbai
1 compromised version
- Jul 21, 2022
Malware in autotrain
1 compromised version
- Jul 21, 2022
Malware in web-kore-sdk
1 compromised version
- Jul 21, 2022
Malware in kinesis-app-panel
1 compromised version
- Jul 21, 2022
Malware in identity-sam-landing
1 compromised version
- Jul 21, 2022
Malware in portail-web
1 compromised version
- Jul 21, 2022
Malware in mofronts
1 compromised version
- Jul 21, 2022
Malicious code in absorblms (npm)
- Jul 21, 2022
Malicious code in whatsapp-landing-page (npm)
- Jul 21, 2022
Malicious code in walmart-express (npm)
- Jul 21, 2022
Malicious code in vyopta-analytics (npm)
- Jul 21, 2022
Malicious code in ui-shop (npm)
- Jul 21, 2022
Malicious code in training-client (npm)
- Jul 21, 2022
Malicious code in sdelements (npm)
- Jul 21, 2022
Malicious code in require-jq (npm)
- Jul 21, 2022
Malicious code in quick-app-guide (npm)
- Jul 21, 2022
Malicious code in promotemplate (npm)
- Jul 21, 2022
Malicious code in promoimmo (npm)
- Jul 21, 2022
Malicious code in promohlineupselling (npm)
- Jul 21, 2022
Malicious code in promofline (npm)
- Jul 21, 2022
Malicious code in promoaline (npm)
- Jul 21, 2022
Malicious code in okbirthday2015 (npm)
- Jul 21, 2022
Malicious code in oidc-frontend (npm)
- Jul 21, 2022
Malicious code in nodejs-email (npm)
- Jul 21, 2022
Malicious code in naver_partner (npm)
- Jul 21, 2022
Malicious code in mgpro.www (npm)
- Jul 21, 2022
Malicious code in matchweb (npm)
- Jul 21, 2022
Malicious code in ivalua (npm)
- Jul 21, 2022
Malicious code in it-roche (npm)
- Jul 21, 2022
Malicious code in identity-site (npm)
- Jul 21, 2022
Malicious code in gadgetstore (npm)
- Jul 21, 2022
Malicious code in emagister-front (npm)
- Jul 21, 2022
Malicious code in dev_pro (npm)
- Jul 21, 2022
Malicious code in csp-login-app (npm)
- Jul 21, 2022
Malicious code in connect_softbank_interface (npm)
- Jul 21, 2022
Malicious code in bifrostmigrationmonitor (npm)
Page 6404 of 6,634