Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 20, 2022
Malicious code in deere-i18n (npm)
- Jul 20, 2022
Malware in deere-i18n
1 compromised version
- Jul 20, 2022
Malware in percy-web
1 compromised version
- Jul 20, 2022
Malware in amplify-category-api-e2e-core
1 compromised version
- Jul 20, 2022
Malware in amplify-category-api-dynamodb-simulator
1 compromised version
- Jul 20, 2022
Malicious code in wm-publish-statuses (npm)
- Jul 20, 2022
Malicious code in wm-cookies-api (npm)
- Jul 20, 2022
Malware in wm-publish-statuses
1 compromised version
- Jul 20, 2022
Malware in wm-cookies-api
1 compromised version
- Jul 20, 2022
Malicious code in html-live-player (npm)
- Jul 20, 2022
Malware in html-live-player
1 compromised version
- Jul 20, 2022
Malicious code in indy-vdr-shared (npm)
- Jul 20, 2022
Malware in indy-vdr-shared
1 compromised version
- Jul 20, 2022
Malicious code in com.alice.adonis (npm)
- Jul 20, 2022
Malware in com.alice.adonis
1 compromised version
- Jul 20, 2022
Malicious code in @alice-bob/com.alice.adonis (npm)
- Jul 20, 2022
Malware in @alice-bob/com.alice.adonis
1 compromised version
- Jul 20, 2022
Malicious code in ppreact-lib (npm)
- Jul 20, 2022
Malicious code in mediasoup-sdp-bridge (npm)
- Jul 20, 2022
Malicious code in header-footer-paypal (npm)
- Jul 20, 2022
Malicious code in dw-header-footer-paypal (npm)
- Jul 20, 2022
Malware in dw-header-footer-paypal
1 compromised version
- Jul 20, 2022
Malware in header-footer-paypal
1 compromised version
- Jul 20, 2022
Malware in ppreact-lib
1 compromised version
- Jul 20, 2022
Malware in mediasoup-sdp-bridge
1 compromised version
- Jul 20, 2022
Malicious code in remotepshell (npm)
- Jul 20, 2022
Malicious code in hwzpgf (npm)
- Jul 20, 2022
Malware in remotepshell
1 compromised version
- Jul 20, 2022
Malware in hwzpgf
1 compromised version
- Jul 20, 2022
Malicious code in discord.js-auth2 (npm)
- Jul 20, 2022
Malware in discord.js-auth2
1 compromised version
- Jul 18, 2022
Malicious code in alertmanager-discord (npm)
- Jul 18, 2022
Malicious code in tranchess-core (npm)
- Jul 18, 2022
Malicious code in sushiswap-analytics (npm)
- Jul 18, 2022
Malicious code in sgn-explorer (npm)
- Jul 18, 2022
Malicious code in ptokens-erc777-smart-contract (npm)
- Jul 18, 2022
Malicious code in pancakeswap-v2-subgraph (npm)
- Jul 18, 2022
Malicious code in obyte-witness (npm)
- Jul 18, 2022
Malicious code in morpho-token (npm)
- Jul 18, 2022
Malicious code in lido-cosmos-docs (npm)
- Jul 18, 2022
Malicious code in kadenaswap-ui (npm)
- Jul 18, 2022
Malicious code in ib-subgraph (npm)
- Jul 18, 2022
Malicious code in headless-obyte (npm)
- Jul 18, 2022
Malicious code in dependencies-zksync (npm)
- Jul 18, 2022
Malicious code in cartesi-subgraph (npm)
- Jul 18, 2022
Malicious code in axelar-signing-relayer (npm)
- Jul 18, 2022
Malicious code in anytoken-locked (npm)
- Jul 18, 2022
Malicious code in anyswap-rewards (npm)
- Jul 18, 2022
Malware in dependencies-zksync
1 compromised version
- Jul 18, 2022
Malware in pancakeswap-v2-subgraph
1 compromised version
Page 6406 of 6,634