Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malware in lint-config-qiwi
1 compromised version
- Jun 20, 2022
Malicious code in xo-shim-promise (npm)
- Jun 20, 2022
Malicious code in xo-hermes-checkout (npm)
- Jun 20, 2022
Malicious code in idnnnms-widget-auth-service (npm)
- Jun 20, 2022
Malicious code in app-shims (npm)
- Jun 20, 2022
Malware in idnnnms-widget-auth-service
1 compromised version
- Jun 20, 2022
Malware in xo-hermes-checkout
1 compromised version
- Jun 20, 2022
Malware in app-shims
1 compromised version
- Jun 20, 2022
Malware in xo-shim-promise
1 compromised version
- Jun 20, 2022
Malicious code in yelp_template (npm)
- Jun 20, 2022
Malicious code in react-paypal-js (npm)
- Jun 20, 2022
Malicious code in idmsa (npm)
- Jun 20, 2022
Malicious code in corp_template (npm)
- Jun 20, 2022
Malicious code in clusterman-metrics (npm)
- Jun 20, 2022
Malware in clusterman-metrics
1 compromised version
- Jun 20, 2022
Malware in corp_template
1 compromised version
- Jun 20, 2022
Malware in yelp_template
1 compromised version
- Jun 20, 2022
Malware in idmsa
1 compromised version
- Jun 20, 2022
Malware in react-paypal-js
1 compromised version
- Jun 20, 2022
Malicious code in pypl (npm)
- Jun 20, 2022
Malicious code in pingheretoo (npm)
- Jun 20, 2022
Malicious code in here-paypal (npm)
- Jun 20, 2022
Malware in pypl
1 compromised version
- Jun 20, 2022
Malware in pingheretoo
1 compromised version
- Jun 20, 2022
Malware in here-paypal
1 compromised version
- Jun 20, 2022
Malicious code in testfromauro (npm)
- Jun 20, 2022
Malicious code in status-paypal (npm)
- Jun 20, 2022
Malicious code in prepaid-paypal (npm)
- Jun 20, 2022
Malicious code in corp-paypal (npm)
- Jun 20, 2022
Malicious code in community-paypal (npm)
- Jun 20, 2022
Malware in prepaid-paypal
1 compromised version
- Jun 20, 2022
Malware in community-paypal
1 compromised version
- Jun 20, 2022
Malware in testfromauro
1 compromised version
- Jun 20, 2022
Malware in status-paypal
1 compromised version
- Jun 20, 2022
Malware in corp-paypal
1 compromised version
- Jun 20, 2022
Malicious code in @tekion/test (npm)
- Jun 20, 2022
Malicious code in @tekion/fxt (npm)
- Jun 20, 2022
Malicious code in com.unity.postprocessing (npm)
- Jun 20, 2022
Malicious code in com.google.firebase.app (npm)
- Jun 20, 2022
Malware in com.google.firebase.app
1 compromised version
- Jun 20, 2022
Malware in @tekion/fxt
1 compromised version
- Jun 20, 2022
Malware in @tekion/test
1 compromised version
- Jun 20, 2022
Malware in com.unity.postprocessing
1 compromised version
- Jun 20, 2022
Malicious code in @tekion/kxt (npm)
- Jun 20, 2022
Malicious code in @tekion/gamma (npm)
- Jun 20, 2022
Malicious code in @tekion/beta (npm)
- Jun 20, 2022
Malicious code in @tekion/alpha (npm)
- Jun 20, 2022
Malware in @tekion/alpha
1 compromised version
- Jun 20, 2022
Malware in @tekion/kxt
1 compromised version
- Jun 20, 2022
Malware in @tekion/beta
1 compromised version
Page 6460 of 6,634