Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malware in testingtesttencencent
1 compromised version
- Jun 20, 2022
Malicious code in huobi-trading-view (npm)
- Jun 20, 2022
Malicious code in hb-websocket-client (npm)
- Jun 20, 2022
Malicious code in hb-portal-xss (npm)
- Jun 20, 2022
Malicious code in hb-analytics-js-sdk (npm)
- Jun 20, 2022
Malware in hb-analytics-js-sdk
1 compromised version
- Jun 20, 2022
Malware in huobi-trading-view
1 compromised version
- Jun 20, 2022
Malware in hb-websocket-client
1 compromised version
- Jun 20, 2022
Malware in hb-portal-xss
1 compromised version
- Jun 20, 2022
Malicious code in huobi-trading-view-swap (npm)
- Jun 20, 2022
Malicious code in huobi-bs-fe-scaffold (npm)
- Jun 20, 2022
Malicious code in huobi-bigmac-component (npm)
- Jun 20, 2022
Malicious code in fed-cnr-pagelet (npm)
- Jun 20, 2022
Malware in huobi-bs-fe-scaffold
1 compromised version
- Jun 20, 2022
Malware in huobi-bigmac-component
1 compromised version
- Jun 20, 2022
Malware in huobi-trading-view-swap
1 compromised version
- Jun 20, 2022
Malware in fed-cnr-pagelet
1 compromised version
- Jun 20, 2022
Malicious code in pwn_module (npm)
- Jun 20, 2022
Malicious code in login.mail.ru (npm)
- Jun 20, 2022
Malicious code in lenta_pulse_mail_ru_internal (npm)
- Jun 20, 2022
Malicious code in lenta_pulse_mail_ru (npm)
- Jun 20, 2022
Malicious code in @is24at/react-tracking (npm)
1 compromised version
- Jun 20, 2022
Malware in lenta_pulse_mail_ru_internal
1 compromised version
- Jun 20, 2022
Malware in pwn_module
1 compromised version
- Jun 20, 2022
Malware in @is24at/react-tracking
1 compromised version
- Jun 20, 2022
Malware in login.mail.ru
1 compromised version
- Jun 20, 2022
Malware in lenta_pulse_mail_ru
1 compromised version
- Jun 20, 2022
Malicious code in topmailru (npm)
- Jun 20, 2022
Malicious code in pulse-lenta (npm)
- Jun 20, 2022
Malicious code in fbjs-build (npm)
- Jun 20, 2022
Malware in pulse-lenta
1 compromised version
- Jun 20, 2022
Malware in topmailru
1 compromised version
- Jun 20, 2022
Malware in fbjs-build
1 compromised version
- Jun 20, 2022
Malicious code in admanhtml (npm)
- Jun 20, 2022
Malicious code in wpt-retriever (npm)
- Jun 20, 2022
Malicious code in virtual-authenticators-tab (npm)
- Jun 20, 2022
Malicious code in rbadman-html5 (npm)
- Jun 20, 2022
Malicious code in mailrupush (npm)
- Jun 20, 2022
Malware in rbadman-html5
1 compromised version
- Jun 20, 2022
Malware in wpt-retriever
1 compromised version
- Jun 20, 2022
Malware in mailrupush
1 compromised version
- Jun 20, 2022
Malware in admanhtml
1 compromised version
- Jun 20, 2022
Malware in virtual-authenticators-tab
1 compromised version
- Jun 20, 2022
Malicious code in test-audit (npm)
- Jun 20, 2022
Malicious code in ms.jsll (npm)
- Jun 20, 2022
Malicious code in jsll (npm)
- Jun 20, 2022
Malicious code in fraud-filter (npm)
- Jun 20, 2022
Malware in test-audit
1 compromised version
- Jun 20, 2022
Malware in fraud-filter
1 compromised version
- Jun 20, 2022
Malware in jsll
1 compromised version
Page 6442 of 6,634