Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,136 total in npm · sorted newest first- Jul 6, 2022
Malware in roar-01
1 compromised version
- Jul 6, 2022
Malicious code in footericon (npm)
5 compromised versions
- Jul 6, 2022
Malware in footericon
1 compromised version
- Jul 6, 2022
Malicious code in ionicio (npm)
1 compromised version
- Jul 6, 2022
Malicious code in ionic-icon (npm)
1 compromised version
- Jul 6, 2022
Malware in ionic-icon
1 compromised version
- Jul 6, 2022
Malware in ionicio
1 compromised version
- Jul 6, 2022
Malicious code in ajax-libs (npm)
3 compromised versions
- Jul 6, 2022
Malicious code in ajax-library (npm)
2 compromised versions
- Jul 6, 2022
Malicious code in umbrellaks (npm)
1 compromised version
- Jul 6, 2022
Malicious code in icon-package (npm)
18 compromised versions
- Jul 6, 2022
Malware in icon-package
1 compromised version
- Jul 6, 2022
Malware in ajax-library
1 compromised version
- Jul 6, 2022
Malware in umbrellaks
1 compromised version
- Jul 6, 2022
Malware in ajax-libs
1 compromised version
- Jul 5, 2022
Malicious code in @cuda-networks/bds-core (npm)
- Jul 5, 2022
Malware in @cuda-networks/bds-core
1 compromised version
- Jul 5, 2022
Malicious code in eslint-plugin-translation-vars (npm)
- Jul 5, 2022
Malware in eslint-plugin-translation-vars
1 compromised version
- Jul 5, 2022
Malicious code in @ovh-ui/oui-checkbox (npm)
- Jul 5, 2022
Malware in @ovh-ui/oui-checkbox
1 compromised version
- Jul 5, 2022
Malicious code in io-components (npm)
- Jul 5, 2022
Malicious code in cd-system (npm)
- Jul 5, 2022
Malware in cd-system
1 compromised version
- Jul 5, 2022
Malware in io-components
1 compromised version
- Jul 5, 2022
Malicious code in @trp-gims-usi-cip/web-portal-lib (npm)
- Jul 5, 2022
Malware in @trp-gims-usi-cip/web-portal-lib
1 compromised version
- Jul 5, 2022
Malicious code in green-color (npm)
- Jul 5, 2022
Malware in green-color
1 compromised version
- Jul 5, 2022
Malicious code in zen-website (npm)
- Jul 5, 2022
Malicious code in react-bank-api (npm)
- Jul 5, 2022
Malicious code in pipeline-npm-artifactory (npm)
- Jul 5, 2022
Malicious code in frogsui (npm)
- Jul 5, 2022
Malicious code in fecustomui (npm)
- Jul 5, 2022
Malware in pipeline-npm-artifactory
1 compromised version
- Jul 5, 2022
Malware in frogsui
1 compromised version
- Jul 5, 2022
Malware in fecustomui
1 compromised version
- Jul 5, 2022
Malware in react-bank-api
1 compromised version
- Jul 5, 2022
Malware in zen-website
1 compromised version
- Jul 5, 2022
Malicious code in usersnap-frontend (npm)
- Jul 5, 2022
Malicious code in hhsoig-design-system-core (npm)
- Jul 5, 2022
Malware in hhsoig-design-system-core
1 compromised version
- Jul 5, 2022
Malware in usersnap-frontend
1 compromised version
- Jul 5, 2022
Malicious code in indrasecuritylib (npm)
- Jul 5, 2022
Malware in indrasecuritylib
1 compromised version
- Jul 5, 2022
Malicious code in v12-discord.js (npm)
- Jul 5, 2022
Malicious code in node-title (npm)
- Jul 5, 2022
Malicious code in node-colors-gen (npm)
- Jul 5, 2022
Malware in node-title
1 compromised version
- Jul 5, 2022
Malware in node-colors-gen
1 compromised version
Page 6437 of 6,643