Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malware in simple_cups-handler
1 compromised version
- Jun 20, 2022
Malicious code in accessibility-insights-web (npm)
- Jun 20, 2022
Malicious code in testy4948 (npm)
- Jun 20, 2022
Malicious code in param_projectnametolower (npm)
- Jun 20, 2022
Malicious code in handbook-epub (npm)
- Jun 20, 2022
Malware in testy4948
1 compromised version
- Jun 20, 2022
Malware in param_projectnametolower
1 compromised version
- Jun 20, 2022
Malware in handbook-epub
1 compromised version
- Jun 20, 2022
Malware in accessibility-insights-web
1 compromised version
- Jun 20, 2022
Malicious code in @qcsfe/venus-token (npm)
- Jun 20, 2022
Malicious code in @md-fe/antd-upload (npm)
- Jun 20, 2022
Malicious code in @ling-web/psdviewer (npm)
- Jun 20, 2022
Malicious code in @blockpro/render (npm)
- Jun 20, 2022
Malware in @qcsfe/venus-token
1 compromised version
- Jun 20, 2022
Malware in @blockpro/render
1 compromised version
- Jun 20, 2022
Malware in @md-fe/antd-upload
1 compromised version
- Jun 20, 2022
Malware in @ling-web/psdviewer
1 compromised version
- Jun 20, 2022
Malicious code in @qwui/wallet (npm)
- Jun 20, 2022
Malicious code in @qwui/core (npm)
- Jun 20, 2022
Malicious code in @qcsfe/qnode (npm)
- Jun 20, 2022
Malicious code in @qcsfe/common-progressbar (npm)
- Jun 20, 2022
Malicious code in @qcsfe/common-lmap (npm)
- Jun 20, 2022
Malware in @qcsfe/qnode
1 compromised version
- Jun 20, 2022
Malware in @qcsfe/common-lmap
1 compromised version
- Jun 20, 2022
Malware in @qwui/wallet
1 compromised version
- Jun 20, 2022
Malware in @qcsfe/common-progressbar
1 compromised version
- Jun 20, 2022
Malware in @qwui/core
1 compromised version
- Jun 20, 2022
Malicious code in @thrift-api/request (npm)
- Jun 20, 2022
Malicious code in @thrift-api/drivertrade-web (npm)
- Jun 20, 2022
Malicious code in com.google.play.comon (npm)
- Jun 20, 2022
Malicious code in com.google.play (npm)
- Jun 20, 2022
Malware in @thrift-api/drivertrade-web
1 compromised version
- Jun 20, 2022
Malware in @thrift-api/request
1 compromised version
- Jun 20, 2022
Malware in com.google.play.comon
1 compromised version
- Jun 20, 2022
Malware in com.google.play
1 compromised version
- Jun 20, 2022
Malicious code in meupkgdeteste (npm)
- Jun 20, 2022
Malicious code in hl7.fhir (npm)
- Jun 20, 2022
Malicious code in elm-combine (npm)
- Jun 20, 2022
Malicious code in com.google (npm)
- Jun 20, 2022
Malware in hl7.fhir
1 compromised version
- Jun 20, 2022
Malware in com.google
1 compromised version
- Jun 20, 2022
Malware in elm-combine
1 compromised version
- Jun 20, 2022
Malware in meupkgdeteste
1 compromised version
- Jun 20, 2022
Malicious code in validate-order (npm)
- Jun 20, 2022
Malicious code in samples-bootstrap-theme (npm)
- Jun 20, 2022
Malicious code in restaurant-approval (npm)
- Jun 20, 2022
Malicious code in realm-postgres-adapters (npm)
- Jun 20, 2022
Malware in samples-bootstrap-theme
1 compromised version
- Jun 20, 2022
Malware in restaurant-approval
1 compromised version
- Jun 20, 2022
Malware in realm-postgres-adapters
1 compromised version
Page 6440 of 6,634