Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malware in concatarraybuffer
1 compromised version
- Jun 20, 2022
Malicious code in clearinterval (npm)
- Jun 20, 2022
Malicious code in clearimmediate (npm)
- Jun 20, 2022
Malicious code in canusefetchstream (npm)
- Jun 20, 2022
Malicious code in buffervelocity (npm)
- Jun 20, 2022
Malicious code in bufferreplacementhelper (npm)
- Jun 20, 2022
Malware in bufferreplacementhelper
1 compromised version
- Jun 20, 2022
Malware in canusefetchstream
1 compromised version
- Jun 20, 2022
Malware in clearinterval
1 compromised version
- Jun 20, 2022
Malware in buffervelocity
1 compromised version
- Jun 20, 2022
Malware in clearimmediate
1 compromised version
- Jun 20, 2022
Malicious code in vertx (npm)
- Jun 20, 2022
Malicious code in snapchat-api (npm)
- Jun 20, 2022
Malicious code in com.google.external-dependency-manager (npm)
- Jun 20, 2022
Malicious code in blockfi (npm)
- Jun 20, 2022
Malware in vertx
1 compromised version
- Jun 20, 2022
Malware in snapchat-api
1 compromised version
- Jun 20, 2022
Malware in com.google.external-dependency-manager
1 compromised version
- Jun 20, 2022
Malware in blockfi
1 compromised version
- Jun 20, 2022
Malicious code in newrelic-caf (npm)
- Jun 20, 2022
Malicious code in line-liff-v2-starter (npm)
- Jun 20, 2022
Malicious code in docs.hackerone.com (npm)
- Jun 20, 2022
Malicious code in com.outsystems.plugins.fileviewer (npm)
- Jun 20, 2022
Malware in docs.hackerone.com
1 compromised version
- Jun 20, 2022
Malware in newrelic-caf
1 compromised version
- Jun 20, 2022
Malware in line-liff-v2-starter
1 compromised version
- Jun 20, 2022
Malware in com.outsystems.plugins.fileviewer
1 compromised version
- Jun 20, 2022
Malicious code in github-owners-bot (npm)
- Jun 20, 2022
Malicious code in facebook-instant-articles-builder (npm)
- Jun 20, 2022
Malicious code in curve-api (npm)
- Jun 20, 2022
Malicious code in cro-staking (npm)
- Jun 20, 2022
Malware in curve-api
1 compromised version
- Jun 20, 2022
Malware in facebook-instant-articles-builder
1 compromised version
- Jun 20, 2022
Malware in github-owners-bot
1 compromised version
- Jun 20, 2022
Malware in cro-staking
1 compromised version
- Jun 20, 2022
Malicious code in playwright.dev (npm)
- Jun 20, 2022
Malicious code in libfuzzer-sys (npm)
- Jun 20, 2022
Malicious code in internal_package_goludev (npm)
- Jun 20, 2022
Malicious code in hero-admin (npm)
- Jun 20, 2022
Malware in hero-admin
1 compromised version
- Jun 20, 2022
Malware in internal_package_goludev
1 compromised version
- Jun 20, 2022
Malware in libfuzzer-sys
1 compromised version
- Jun 20, 2022
Malware in playwright.dev
1 compromised version
- Jun 20, 2022
Malicious code in tempdownloadtempfile (npm)
1 compromised version
- Jun 20, 2022
Malicious code in splitsoftware (npm)
- Jun 20, 2022
Malicious code in splitio-redux (npm)
- Jun 20, 2022
Malicious code in nodejs_net_server (npm)
12 compromised versions
- Jun 20, 2022
Malware in splitio-redux
1 compromised version
- Jun 20, 2022
Malware in tempdownloadtempfile
1 compromised version
- Jun 20, 2022
Malware in nodejs_net_server
1 compromised version
Page 6458 of 6,634