Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malware in videoplayershakaperformancelogger
1 compromised version
- Jun 20, 2022
Malware in videoplayerresourcetimer
1 compromised version
- Jun 20, 2022
Malware in videoplayershakaglobalconfig
1 compromised version
- Jun 20, 2022
Malicious code in videoplayerlocalbandwidthestimator (npm)
- Jun 20, 2022
Malicious code in videoplayerbitrateestimator (npm)
- Jun 20, 2022
Malicious code in videodashprefetchcache (npm)
- Jun 20, 2022
Malicious code in videoclientedgecooperation (npm)
- Jun 20, 2022
Malware in videoplayerbitrateestimator
1 compromised version
- Jun 20, 2022
Malware in videoclientedgecooperation
1 compromised version
- Jun 20, 2022
Malware in videoplayerlocalbandwidthestimator
1 compromised version
- Jun 20, 2022
Malware in videodashprefetchcache
1 compromised version
- Jun 20, 2022
Malicious code in unitconstants (npm)
- Jun 20, 2022
Malicious code in tcfm (npm)
- Jun 20, 2022
Malicious code in setimmediateacrosstransitions (npm)
- Jun 20, 2022
Malicious code in serverjsdefine (npm)
- Jun 20, 2022
Malicious code in init-epic-link-multiselect (npm)
- Jun 20, 2022
Malware in setimmediateacrosstransitions
1 compromised version
- Jun 20, 2022
Malware in unitconstants
1 compromised version
- Jun 20, 2022
Malware in serverjsdefine
1 compromised version
- Jun 20, 2022
Malware in tcfm
1 compromised version
- Jun 20, 2022
Malware in init-epic-link-multiselect
1 compromised version
- Jun 20, 2022
Malicious code in segmentrequestmanager (npm)
- Jun 20, 2022
Malicious code in networkstatusdetector (npm)
- Jun 20, 2022
Malicious code in deppppp (npm)
- Jun 20, 2022
Malware in segmentrequestmanager
1 compromised version
- Jun 20, 2022
Malware in networkstatusdetector
1 compromised version
- Jun 20, 2022
Malware in deppppp
1 compromised version
- Jun 20, 2022
Malicious code in relayfbnetworkloggercontroller (npm)
- Jun 20, 2022
Malicious code in multiplesegmentsprovider (npm)
- Jun 20, 2022
Malicious code in mosutils (npm)
- Jun 20, 2022
Malicious code in mergeseekrangegaps (npm)
- Jun 20, 2022
Malware in mosutils
1 compromised version
- Jun 20, 2022
Malware in relayfbnetworkloggercontroller
1 compromised version
- Jun 20, 2022
Malware in multiplesegmentsprovider
1 compromised version
- Jun 20, 2022
Malware in mergeseekrangegaps
1 compromised version
- Jun 20, 2022
Malicious code in maybeconverthiveerrortoshakaneterror (npm)
- Jun 20, 2022
Malicious code in loglongakamairequest (npm)
- Jun 20, 2022
Malicious code in localbitratehelper (npm)
- Jun 20, 2022
Malicious code in getseekrangegapsfromshakareferences (npm)
- Jun 20, 2022
Malware in maybeconverthiveerrortoshakaneterror
1 compromised version
- Jun 20, 2022
Malware in loglongakamairequest
1 compromised version
- Jun 20, 2022
Malware in getseekrangegapsfromshakareferences
1 compromised version
- Jun 20, 2022
Malware in localbitratehelper
1 compromised version
- Jun 20, 2022
Malicious code in firstloadedvideopriorityadjuster (npm)
- Jun 20, 2022
Malicious code in extractcea608 (npm)
- Jun 20, 2022
Malicious code in concatarraybuffer (npm)
- Jun 20, 2022
Malicious code in cleartimeout (npm)
- Jun 20, 2022
Malware in firstloadedvideopriorityadjuster
1 compromised version
- Jun 20, 2022
Malware in extractcea608
1 compromised version
- Jun 20, 2022
Malware in cleartimeout
1 compromised version
Page 6457 of 6,634