Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 8, 2022
Malicious code in sketch-pexels (npm)
- Jul 8, 2022
Malicious code in legendggwp (npm)
- Jul 8, 2022
Malware in legendggwp
1 compromised version
- Jul 8, 2022
Malware in sketch-pexels
1 compromised version
- Jul 8, 2022
Malware in teamcity-cloud-agent-updater
1 compromised version
- Jul 8, 2022
Malicious code in sync-process (npm)
- Jul 8, 2022
Malicious code in small-ms (npm)
- Jul 8, 2022
Malicious code in node-child (npm)
- Jul 8, 2022
Malicious code in emojis-discord (npm)
- Jul 8, 2022
Malware in small-ms
1 compromised version
- Jul 8, 2022
Malware in emojis-discord
1 compromised version
- Jul 8, 2022
Malware in sync-process
1 compromised version
- Jul 8, 2022
Malware in node-child
1 compromised version
- Jul 6, 2022
Malicious code in package-ionicons (npm)
1 compromised version
- Jul 6, 2022
Malicious code in package-ionicon (npm)
1 compromised version
- Jul 6, 2022
Malicious code in ionicons-json (npm)
1 compromised version
- Jul 6, 2022
Malicious code in ionicons-js (npm)
1 compromised version
- Jul 6, 2022
Malicious code in base64-javascript (npm)
1 compromised version
- Jul 6, 2022
Malware in package-ionicon
1 compromised version
- Jul 6, 2022
Malware in base64-javascript
1 compromised version
- Jul 6, 2022
Malware in ionicons-json
1 compromised version
- Jul 6, 2022
Malware in package-ionicons
1 compromised version
- Jul 6, 2022
Malware in ionicons-js
1 compromised version
- Jul 6, 2022
Malicious code in script-package (npm)
- Jul 6, 2022
Malicious code in pack-icons (npm)
1 compromised version
- Jul 6, 2022
Malicious code in ionicons-pack (npm)
1 compromised version
- Jul 6, 2022
Malicious code in ionicon-package (npm)
1 compromised version
- Jul 6, 2022
Malicious code in icons-packages (npm)
1 compromised version
- Jul 6, 2022
Malicious code in icons-pack (npm)
1 compromised version
- Jul 6, 2022
Malware in ionicon-package
1 compromised version
- Jul 6, 2022
Malware in script-package
1 compromised version
- Jul 6, 2022
Malware in icons-packages
1 compromised version
- Jul 6, 2022
Malware in ionicons-pack
1 compromised version
- Jul 6, 2022
Malware in pack-icons
1 compromised version
- Jul 6, 2022
Malware in icons-pack
1 compromised version
- Jul 6, 2022
Malicious code in ajax-libz (npm)
1 compromised version
- Jul 6, 2022
Malicious code in ajax-googleapis (npm)
1 compromised version
- Jul 6, 2022
Malicious code in wkwk100 (npm)
1 compromised version
- Jul 6, 2022
Malicious code in tezdoank (npm)
2 compromised versions
- Jul 6, 2022
Malicious code in swiper-bundle (npm)
5 compromised versions
- Jul 6, 2022
Malicious code in swiper-bundie (npm)
1 compromised version
- Jul 6, 2022
Malicious code in roar-02 (npm)
1 compromised version
- Jul 6, 2022
Malicious code in roar-01 (npm)
1 compromised version
- Jul 6, 2022
Malicious code in atez (npm)
1 compromised version
- Jul 6, 2022
Malware in ajax-libz
1 compromised version
- Jul 6, 2022
Malware in wkwk100
1 compromised version
- Jul 6, 2022
Malware in swiper-bundle
1 compromised version
- Jul 6, 2022
Malware in tezdoank
1 compromised version
- Jul 6, 2022
Malware in atez
1 compromised version
- Jul 6, 2022
Malware in roar-02
1 compromised version
Page 6427 of 6,634