Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malicious code in preinstallv5 (npm)
- Jun 20, 2022
Malicious code in brandtheme (npm)
- Jun 20, 2022
Malware in xrprovider
1 compromised version
- Jun 20, 2022
Malware in amplify_default
1 compromised version
- Jun 20, 2022
Malware in brandtheme
1 compromised version
- Jun 20, 2022
Malware in @ws-amplify/core
1 compromised version
- Jun 20, 2022
Malware in preinstallv5
1 compromised version
- Jun 20, 2022
Malicious code in urlopener (npm)
- Jun 20, 2022
Malicious code in oauthstorage (npm)
- Jun 20, 2022
Malicious code in mqttoverwsprovider (npm)
- Jun 20, 2022
Malicious code in lexruntime (npm)
- Jun 20, 2022
Malware in lexruntime
1 compromised version
- Jun 20, 2022
Malware in urlopener
1 compromised version
- Jun 20, 2022
Malware in mqttoverwsprovider
1 compromised version
- Jun 20, 2022
Malware in oauthstorage
1 compromised version
- Jun 20, 2022
Malicious code in amplify-codegen-e2e-core (npm)
- Jun 20, 2022
Malicious code in uv-dlopen (npm)
- Jun 20, 2022
Malicious code in storagefileshare (npm)
- Jun 20, 2022
Malicious code in p4clients (npm)
- Jun 20, 2022
Malicious code in keyvault-resource-manager (npm)
- Jun 20, 2022
Malware in keyvault-resource-manager
1 compromised version
- Jun 20, 2022
Malware in storagefileshare
1 compromised version
- Jun 20, 2022
Malware in amplify-codegen-e2e-core
1 compromised version
- Jun 20, 2022
Malware in p4clients
1 compromised version
- Jun 20, 2022
Malware in uv-dlopen
1 compromised version
- Jun 20, 2022
Malicious code in xml-service (npm)
- Jun 20, 2022
Malicious code in headerprefix (npm)
- Jun 20, 2022
Malicious code in generator-electron-dotnet (npm)
- Jun 20, 2022
Malware in generator-electron-dotnet
1 compromised version
- Jun 20, 2022
Malware in xml-service
1 compromised version
- Jun 20, 2022
Malware in headerprefix
1 compromised version
- Jun 20, 2022
Malicious code in additional-properties (npm)
- Jun 20, 2022
Malicious code in odata-discriminator (npm)
- Jun 20, 2022
Malicious code in network-resource-manager (npm)
- Jun 20, 2022
Malicious code in body-complex-rest (npm)
- Jun 20, 2022
Malware in network-resource-manager
1 compromised version
- Jun 20, 2022
Malware in odata-discriminator
1 compromised version
- Jun 20, 2022
Malware in additional-properties
1 compromised version
- Jun 20, 2022
Malware in body-complex-rest
1 compromised version
- Jun 20, 2022
Malicious code in xms-error-responses (npm)
- Jun 20, 2022
Malicious code in useragent-corev2 (npm)
- Jun 20, 2022
Malicious code in url-multi (npm)
- Jun 20, 2022
Malicious code in subscriptionid-apiversion (npm)
- Jun 20, 2022
Malware in subscriptionid-apiversion
1 compromised version
- Jun 20, 2022
Malware in url-multi
1 compromised version
- Jun 20, 2022
Malware in xms-error-responses
1 compromised version
- Jun 20, 2022
Malware in useragent-corev2
1 compromised version
- Jun 20, 2022
Malicious code in zzzreport (npm)
- Jun 20, 2022
Malicious code in storageblob (npm)
- Jun 20, 2022
Malicious code in required-optional (npm)
Page 6453 of 6,634