Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malware in aws-delivlib-sample
1 compromised version
- Jun 20, 2022
Malware in unicornflix
1 compromised version
- Jun 20, 2022
Malware in aws-amplify-unicorntrivia-workshop
1 compromised version
- Jun 20, 2022
Malicious code in amazon-s3-data-replication-hub-plugin (npm)
- Jun 20, 2022
Malicious code in output-scrubber-nodejs (npm)
- Jun 20, 2022
Malicious code in aws-track-and-trace (npm)
- Jun 20, 2022
Malicious code in anti-hotlinking (npm)
- Jun 20, 2022
Malware in output-scrubber-nodejs
1 compromised version
- Jun 20, 2022
Malware in aws-track-and-trace
1 compromised version
- Jun 20, 2022
Malware in amazon-s3-data-replication-hub-plugin
1 compromised version
- Jun 20, 2022
Malware in anti-hotlinking
1 compromised version
- Jun 20, 2022
Malicious code in amplify-video (npm)
- Jun 20, 2022
Malicious code in open-data-registry-browser (npm)
- Jun 20, 2022
Malicious code in mplify-video (npm)
- Jun 20, 2022
Malicious code in aws-data-replication-hub (npm)
- Jun 20, 2022
Malicious code in aws-centralized-waf-and-vpc-security-group-management (npm)
- Jun 20, 2022
Malware in aws-centralized-waf-and-vpc-security-group-management
1 compromised version
- Jun 20, 2022
Malware in open-data-registry-browser
1 compromised version
- Jun 20, 2022
Malware in mplify-video
1 compromised version
- Jun 20, 2022
Malware in aws-data-replication-hub
1 compromised version
- Jun 20, 2022
Malware in amplify-video
1 compromised version
- Jun 20, 2022
Malicious code in amazon-ecr-data-replication-hub-plugin (npm)
- Jun 20, 2022
Malicious code in aws-video-transcriber (npm)
- Jun 20, 2022
Malicious code in aws-centralized-logging (npm)
- Jun 20, 2022
Malware in aws-centralized-logging
1 compromised version
- Jun 20, 2022
Malware in amazon-ecr-data-replication-hub-plugin
1 compromised version
- Jun 20, 2022
Malware in aws-video-transcriber
1 compromised version
- Jun 20, 2022
Malicious code in amazon-timestream-tools (npm)
- Jun 20, 2022
Malicious code in aws-simple-cicd (npm)
- Jun 20, 2022
Malicious code in aws-perspective (npm)
- Jun 20, 2022
Malicious code in aws-instance-scheduler (npm)
- Jun 20, 2022
Malware in aws-instance-scheduler
1 compromised version
- Jun 20, 2022
Malware in amazon-timestream-tools
1 compromised version
- Jun 20, 2022
Malware in aws-perspective
1 compromised version
- Jun 20, 2022
Malware in aws-simple-cicd
1 compromised version
- Jun 20, 2022
Malicious code in simplebeerservice (npm)
- Jun 20, 2022
Malicious code in package-lock.json-dependency (npm)
- Jun 20, 2022
Malicious code in aws-ms-deploy-assistant (npm)
- Jun 20, 2022
Malicious code in aws-iot-greengrass-accelerators (npm)
- Jun 20, 2022
Malicious code in aws-greengrass-provisioner (npm)
- Jun 20, 2022
Malware in aws-iot-greengrass-accelerators
1 compromised version
- Jun 20, 2022
Malware in simplebeerservice
1 compromised version
- Jun 20, 2022
Malware in package-lock.json-dependency
1 compromised version
- Jun 20, 2022
Malware in aws-ms-deploy-assistant
1 compromised version
- Jun 20, 2022
Malware in aws-greengrass-provisioner
1 compromised version
- Jun 20, 2022
Malicious code in virtru-base64 (npm)
- Jun 20, 2022
Malicious code in eth-brownie (npm)
- Jun 20, 2022
Malicious code in cdk-fargate-fastautlscaler (npm)
- Jun 20, 2022
Malware in cdk-fargate-fastautlscaler
1 compromised version
- Jun 20, 2022
Malware in eth-brownie
1 compromised version
Page 6448 of 6,634