Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malware in splitsoftware
1 compromised version
- Jun 20, 2022
Malicious code in wafer-core (npm)
- Jun 20, 2022
Malicious code in virtuoso.dev (npm)
- Jun 20, 2022
Malicious code in ungap (npm)
- Jun 20, 2022
Malicious code in moneytree (npm)
- Jun 20, 2022
Malicious code in arkane-connect (npm)
- Jun 20, 2022
Malware in moneytree
1 compromised version
- Jun 20, 2022
Malware in wafer-core
1 compromised version
- Jun 20, 2022
Malware in virtuoso.dev
1 compromised version
- Jun 20, 2022
Malware in ungap
1 compromised version
- Jun 20, 2022
Malware in arkane-connect
1 compromised version
- Jun 20, 2022
Malicious code in zendeskgarden (npm)
- Jun 20, 2022
Malicious code in mt-web-icons (npm)
- Jun 20, 2022
Malicious code in grnhse (npm)
- Jun 20, 2022
Malicious code in blockchain-com (npm)
- Jun 20, 2022
Malware in mt-web-icons
1 compromised version
- Jun 20, 2022
Malware in blockchain-com
1 compromised version
- Jun 20, 2022
Malware in zendeskgarden
1 compromised version
- Jun 20, 2022
Malware in grnhse
1 compromised version
- Jun 20, 2022
Malicious code in twilio-paste (npm)
- Jun 20, 2022
Malicious code in researchgate (npm)
- Jun 20, 2022
Malicious code in ledgerhq (npm)
- Jun 20, 2022
Malware in twilio-paste
1 compromised version
- Jun 20, 2022
Malware in researchgate
1 compromised version
- Jun 20, 2022
Malware in ledgerhq
1 compromised version
- Jun 20, 2022
Malicious code in admin-tribe (npm)
- Jun 20, 2022
Malicious code in rafaelgg44 (npm)
- Jun 20, 2022
Malicious code in phensley (npm)
- Jun 20, 2022
Malicious code in mt-react-theme-manager (npm)
- Jun 20, 2022
Malicious code in avito (npm)
- Jun 20, 2022
Malware in rafaelgg44
1 compromised version
- Jun 20, 2022
Malware in mt-react-theme-manager
1 compromised version
- Jun 20, 2022
Malware in avito
1 compromised version
- Jun 20, 2022
Malware in phensley
1 compromised version
- Jun 20, 2022
Malware in admin-tribe
1 compromised version
- Jun 20, 2022
Malicious code in ramp-network (npm)
- Jun 20, 2022
Malicious code in npm-test-bravol33 (npm)
- Jun 20, 2022
Malicious code in fortawesome (npm)
- Jun 20, 2022
Malicious code in arkane-network (npm)
- Jun 20, 2022
Malware in ramp-network
1 compromised version
- Jun 20, 2022
Malware in arkane-network
1 compromised version
- Jun 20, 2022
Malware in npm-test-bravol33
1 compromised version
- Jun 20, 2022
Malware in fortawesome
1 compromised version
- Jun 20, 2022
Malicious code in paypal-sdk-e2e-tests (npm)
- Jun 20, 2022
Malicious code in lint-config-qiwi (npm)
- Jun 20, 2022
Malicious code in infectplugin (npm)
- Jun 20, 2022
Malicious code in esprimere (npm)
- Jun 20, 2022
Malware in infectplugin
1 compromised version
- Jun 20, 2022
Malware in paypal-sdk-e2e-tests
1 compromised version
- Jun 20, 2022
Malware in esprimere
1 compromised version
Page 6459 of 6,634