Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,136 total in npm · sorted newest first- Jul 5, 2022
Malware in v12-discord.js
1 compromised version
- Jun 30, 2022
Malicious code in thisisourgoal1 (npm)
- Jun 30, 2022
Malicious code in thisisourgoal (npm)
- Jun 30, 2022
Malware in thisisourgoal
1 compromised version
- Jun 30, 2022
Malware in thisisourgoal1
1 compromised version
- Jun 30, 2022
Malicious code in material-ui-plugin-styles-provider-cache (npm)
- Jun 30, 2022
Malware in material-ui-plugin-styles-provider-cache
1 compromised version
- Jun 30, 2022
Malware in material-ui-plugin-theme-provider-cache
1 compromised version
- Jun 30, 2022
Malicious code in @pagetour/sdk (npm)
- Jun 30, 2022
Malware in @pagetour/sdk
1 compromised version
- Jun 30, 2022
Malicious code in @3p-future-solutions/ember-cui (npm)
- Jun 30, 2022
Malware in @3p-future-solutions/ember-cui
1 compromised version
- Jun 30, 2022
Malicious code in slack-trustpilot (npm)
- Jun 30, 2022
Malicious code in sichain-api (npm)
- Jun 30, 2022
Malicious code in separatecalculatingbinary (npm)
- Jun 30, 2022
Malicious code in cleansheet (npm)
- Jun 30, 2022
Malware in sichain-api
1 compromised version
- Jun 30, 2022
Malware in separatecalculatingbinary
1 compromised version
- Jun 30, 2022
Malware in cleansheet
1 compromised version
- Jun 30, 2022
Malware in slack-trustpilot
1 compromised version
- Jun 30, 2022
Malicious code in purple_team_midway_teste_cenario_2 (npm)
- Jun 30, 2022
Malicious code in purple_team_midway_teste_cenario_1 (npm)
- Jun 30, 2022
Malicious code in purple_team_midway_cenario_2 (npm)
- Jun 30, 2022
Malicious code in purple_team_midway_cenario_1 (npm)
- Jun 30, 2022
Malware in purple_team_midway_cenario_2
1 compromised version
- Jun 30, 2022
Malware in purple_team_midway_cenario_1
1 compromised version
- Jun 30, 2022
Malware in purple_team_midway_teste_cenario_2
1 compromised version
- Jun 30, 2022
Malware in purple_team_midway_teste_cenario_1
1 compromised version
- Jun 30, 2022
Malicious code in syndis-test (npm)
- Jun 30, 2022
Malware in syndis-test
1 compromised version
- Jun 30, 2022
Malicious code in web3-integration (npm)
- Jun 30, 2022
Malware in web3-integration
1 compromised version
- Jun 30, 2022
Malicious code in @it-eng/is-dinosaur (npm)
- Jun 30, 2022
Malware in @it-eng/is-dinosaur
1 compromised version
- Jun 30, 2022
Malicious code in swaty-color (npm)
- Jun 30, 2022
Malware in swaty-color
1 compromised version
- Jun 30, 2022
Malicious code in npmbb-deneuve81 (npm)
- Jun 30, 2022
Malware in npmbb-deneuve81
1 compromised version
- Jun 30, 2022
Malicious code in shda (npm)
- Jun 30, 2022
Malware in shda
1 compromised version
- Jun 30, 2022
Malicious code in personal-colors-kash (npm)
- Jun 30, 2022
Malware in personal-colors-kash
1 compromised version
- Jun 30, 2022
Malicious code in vazgarules (npm)
- Jun 30, 2022
Malware in vazgarules
1 compromised version
- Jun 30, 2022
Malicious code in @radancy/dropr-client (npm)
- Jun 30, 2022
Malware in @radancy/dropr-client
1 compromised version
- Jun 30, 2022
Malicious code in vipps-stitches (npm)
- Jun 30, 2022
Malware in vipps-stitches
1 compromised version
- Jun 30, 2022
Malicious code in rhynocallbackpackage (npm)
- Jun 30, 2022
Malware in rhynocallbackpackage
1 compromised version
Page 6438 of 6,643