Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malware in validate-order
1 compromised version
- Jun 20, 2022
Malicious code in agent-assignment (npm)
- Jun 20, 2022
Malicious code in actions-toolbox (npm)
- Jun 20, 2022
Malicious code in mapbox-gl-shaders (npm)
- Jun 20, 2022
Malicious code in createtile (npm)
- Jun 20, 2022
Malware in agent-assignment
1 compromised version
- Jun 20, 2022
Malware in createtile
1 compromised version
- Jun 20, 2022
Malware in actions-toolbox
1 compromised version
- Jun 20, 2022
Malware in mapbox-gl-shaders
1 compromised version
- Jun 20, 2022
Malicious code in wordpress-element (npm)
- Jun 20, 2022
Malicious code in reflect_decorators (npm)
- Jun 20, 2022
Malicious code in nubank-core (npm)
- Jun 20, 2022
Malicious code in newspack-blocks (npm)
- Jun 20, 2022
Malware in nubank-core
1 compromised version
- Jun 20, 2022
Malware in wordpress-element
1 compromised version
- Jun 20, 2022
Malware in reflect_decorators
1 compromised version
- Jun 20, 2022
Malware in newspack-blocks
1 compromised version
- Jun 20, 2022
Malicious code in test-old-npm-sub-dependency (npm)
- Jun 20, 2022
Malicious code in scrypt-shim (npm)
- Jun 20, 2022
Malicious code in edu-front-util (npm)
- Jun 20, 2022
Malicious code in duo_web_sdk (npm)
- Jun 20, 2022
Malware in edu-front-util
1 compromised version
- Jun 20, 2022
Malware in duo_web_sdk
1 compromised version
- Jun 20, 2022
Malware in scrypt-shim
1 compromised version
- Jun 20, 2022
Malware in test-old-npm-sub-dependency
1 compromised version
- Jun 20, 2022
Malicious code in uw-tools (npm)
- Jun 20, 2022
Malicious code in uw-demo-jest (npm)
- Jun 20, 2022
Malicious code in res-base (npm)
- Jun 20, 2022
Malicious code in @jmfe/jm-jdshare (npm)
- Jun 20, 2022
Malicious code in bisheng-plugin-uw (npm)
- Jun 20, 2022
Malware in res-base
1 compromised version
- Jun 20, 2022
Malware in @jmfe/jm-jdshare
1 compromised version
- Jun 20, 2022
Malware in uw-tools
1 compromised version
- Jun 20, 2022
Malware in bisheng-plugin-uw
1 compromised version
- Jun 20, 2022
Malware in uw-demo-jest
1 compromised version
- Jun 20, 2022
Malicious code in netless-ppt (npm)
- Jun 20, 2022
Malicious code in md-performance (npm)
- Jun 20, 2022
Malicious code in internal-hr-form-shared (npm)
- Jun 20, 2022
Malicious code in @jmfe/rollup-plugin-jss-upload (npm)
- Jun 20, 2022
Malware in netless-ppt
1 compromised version
- Jun 20, 2022
Malware in md-performance
1 compromised version
- Jun 20, 2022
Malware in internal-hr-form-shared
1 compromised version
- Jun 20, 2022
Malware in @jmfe/rollup-plugin-jss-upload
1 compromised version
- Jun 20, 2022
Malicious code in theme_dbtraining (npm)
- Jun 20, 2022
Malicious code in testingtesttencencent (npm)
- Jun 20, 2022
Malicious code in @cwdb/dnsinfo (npm)
- Jun 20, 2022
Malicious code in bob-app-core (npm)
- Jun 20, 2022
Malware in @cwdb/dnsinfo
1 compromised version
- Jun 20, 2022
Malware in bob-app-core
1 compromised version
- Jun 20, 2022
Malware in theme_dbtraining
1 compromised version
Page 6441 of 6,634