Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malware in virtru-base64
1 compromised version
- Jun 20, 2022
Malicious code in amplify-graphiql-explorer (npm)
- Jun 20, 2022
Malicious code in amplify-e2e-core (npm)
- Jun 20, 2022
Malicious code in test-rule-package (npm)
- Jun 20, 2022
Malicious code in my-amplify-plugin (npm)
- Jun 20, 2022
Malicious code in es-sink (npm)
- Jun 20, 2022
Malicious code in architect-http-static (npm)
- Jun 20, 2022
Malware in architect-http-static
1 compromised version
- Jun 20, 2022
Malware in my-amplify-plugin
1 compromised version
- Jun 20, 2022
Malware in test-rule-package
1 compromised version
- Jun 20, 2022
Malware in es-sink
1 compromised version
- Jun 20, 2022
Malware in amplify-e2e-core
1 compromised version
- Jun 20, 2022
Malware in amplify-graphiql-explorer
1 compromised version
- Jun 20, 2022
Malicious code in all-of-them (npm)
- Jun 20, 2022
Malicious code in nestjs-ldap-auth (npm)
- Jun 20, 2022
Malware in nestjs-ldap-auth
1 compromised version
- Jun 20, 2022
Malware in all-of-them
1 compromised version
- Jun 20, 2022
Malicious code in singhaditi12 (npm)
- Jun 20, 2022
Malicious code in nt-shared (npm)
- Jun 20, 2022
Malicious code in grunt-bowerspawn (npm)
- Jun 20, 2022
Malicious code in ember-tracked-local-storag (npm)
- Jun 20, 2022
Malicious code in discord.js-selfbot-updated (npm)
- Jun 20, 2022
Malware in grunt-bowerspawn
1 compromised version
- Jun 20, 2022
Malware in ember-tracked-local-storag
1 compromised version
- Jun 20, 2022
Malware in singhaditi12
1 compromised version
- Jun 20, 2022
Malware in nt-shared
1 compromised version
- Jun 20, 2022
Malware in discord.js-selfbot-updated
1 compromised version
- Jun 20, 2022
Malicious code in aditi1123 (npm)
- Jun 20, 2022
Malicious code in aditi112 (npm)
- Jun 20, 2022
Malicious code in singhadi1222 (npm)
- Jun 20, 2022
Malicious code in daemon121 (npm)
- Jun 20, 2022
Malware in singhadi1222
1 compromised version
- Jun 20, 2022
Malware in daemon121
1 compromised version
- Jun 20, 2022
Malware in aditi1123
1 compromised version
- Jun 20, 2022
Malware in aditi112
1 compromised version
- Jun 20, 2022
Malicious code in singhaditi83683 (npm)
- Jun 20, 2022
Malicious code in singhaditi2707 (npm)
- Jun 20, 2022
Malicious code in build-python12 (npm)
- Jun 20, 2022
Malicious code in build-python (npm)
- Jun 20, 2022
Malware in singhaditi83683
1 compromised version
- Jun 20, 2022
Malware in build-python
1 compromised version
- Jun 20, 2022
Malware in singhaditi2707
1 compromised version
- Jun 20, 2022
Malware in build-python12
1 compromised version
- Jun 20, 2022
Malicious code in adbuil (npm)
- Jun 20, 2022
Malicious code in ad1231 (npm)
- Jun 20, 2022
Malicious code in ad1213 (npm)
- Jun 20, 2022
Malicious code in buildaditi (npm)
- Jun 20, 2022
Malware in adbuil
1 compromised version
- Jun 20, 2022
Malware in ad1231
1 compromised version
- Jun 20, 2022
Malware in buildaditi
1 compromised version
Page 6449 of 6,634