Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malware in ms.jsll
1 compromised version
- Jun 20, 2022
Malicious code in frn-api-client (npm)
- Jun 20, 2022
Malicious code in cms-component-nyse-login (npm)
- Jun 20, 2022
Malicious code in cms-component-layout-nyse-footer (npm)
- Jun 20, 2022
Malicious code in audi-feature-services (npm)
- Jun 20, 2022
Malware in cms-component-nyse-login
1 compromised version
- Jun 20, 2022
Malware in cms-component-layout-nyse-footer
1 compromised version
- Jun 20, 2022
Malware in frn-api-client
1 compromised version
- Jun 20, 2022
Malware in audi-feature-services
1 compromised version
- Jun 20, 2022
Malicious code in vidyard-player-sdk (npm)
- Jun 20, 2022
Malicious code in paycom-cross-platform (npm)
- Jun 20, 2022
Malicious code in dpz.seo (npm)
- Jun 20, 2022
Malicious code in core-guest-spa (npm)
- Jun 20, 2022
Malware in core-guest-spa
1 compromised version
- Jun 20, 2022
Malware in paycom-cross-platform
1 compromised version
- Jun 20, 2022
Malware in dpz.seo
1 compromised version
- Jun 20, 2022
Malware in vidyard-player-sdk
1 compromised version
- Jun 20, 2022
Malicious code in airtable-client (npm)
- Jun 20, 2022
Malicious code in yamm (npm)
- Jun 20, 2022
Malicious code in base-css-styles (npm)
- Jun 20, 2022
Malicious code in apex-web-tools (npm)
- Jun 20, 2022
Malware in airtable-client
1 compromised version
- Jun 20, 2022
Malware in yamm
1 compromised version
- Jun 20, 2022
Malware in apex-web-tools
1 compromised version
- Jun 20, 2022
Malware in base-css-styles
1 compromised version
- Jun 20, 2022
Malicious code in corewebclient (npm)
- Jun 20, 2022
Malicious code in common-tasks (npm)
- Jun 20, 2022
Malicious code in cm.icons (npm)
- Jun 20, 2022
Malicious code in cloudfour.com-patterns (npm)
- Jun 20, 2022
Malware in corewebclient
1 compromised version
- Jun 20, 2022
Malware in common-tasks
1 compromised version
- Jun 20, 2022
Malware in cloudfour.com-patterns
1 compromised version
- Jun 20, 2022
Malware in cm.icons
1 compromised version
- Jun 20, 2022
Malicious code in flotchart (npm)
- Jun 20, 2022
Malicious code in eslint-config-rol (npm)
- Jun 20, 2022
Malicious code in eslint-config-products (npm)
- Jun 20, 2022
Malicious code in enviso-web-components-common (npm)
- Jun 20, 2022
Malware in eslint-config-rol
1 compromised version
- Jun 20, 2022
Malware in enviso-web-components-common
1 compromised version
- Jun 20, 2022
Malware in flotchart
1 compromised version
- Jun 20, 2022
Malware in eslint-config-products
1 compromised version
- Jun 20, 2022
Malicious code in wordpress-core-css (npm)
- Jun 20, 2022
Malicious code in studiolabs-cli (npm)
- Jun 20, 2022
Malicious code in @moczadlo/package_one (npm)
- Jun 20, 2022
Malicious code in grunt-via-filesystem (npm)
- Jun 20, 2022
Malware in @moczadlo/package_one
1 compromised version
- Jun 20, 2022
Malware in grunt-via-filesystem
1 compromised version
- Jun 20, 2022
Malware in studiolabs-cli
1 compromised version
- Jun 20, 2022
Malware in wordpress-core-css
1 compromised version
- Jun 20, 2022
Malicious code in publicrepoui (npm)
Page 6443 of 6,634