Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malware in slack-github-action
1 compromised version
- Jun 20, 2022
Malware in isntal
1 compromised version
- Jun 20, 2022
Malware in request-progres
1 compromised version
- Jun 20, 2022
Malicious code in steamdb-browser-extension (npm)
- Jun 20, 2022
Malicious code in ems-file-service (npm)
- Jun 20, 2022
Malicious code in e2e-synthetics (npm)
- Jun 20, 2022
Malicious code in app-incident-bot (npm)
- Jun 20, 2022
Malware in steamdb-browser-extension
1 compromised version
- Jun 20, 2022
Malware in app-incident-bot
1 compromised version
- Jun 20, 2022
Malware in ems-file-service
1 compromised version
- Jun 20, 2022
Malware in e2e-synthetics
1 compromised version
- Jun 20, 2022
Malicious code in opbeans-node (npm)
- Jun 20, 2022
Malicious code in link-kibana (npm)
- Jun 20, 2022
Malicious code in eui-cljs (npm)
- Jun 20, 2022
Malicious code in elastic-charts-mono (npm)
- Jun 20, 2022
Malware in eui-cljs
1 compromised version
- Jun 20, 2022
Malware in opbeans-node
1 compromised version
- Jun 20, 2022
Malware in elastic-charts-mono
1 compromised version
- Jun 20, 2022
Malware in link-kibana
1 compromised version
- Jun 20, 2022
Malicious code in wickrio-proxy-bot (npm)
- Jun 20, 2022
Malicious code in wickrcrypto (npm)
- Jun 20, 2022
Malicious code in instacart-javascript (npm)
- Jun 20, 2022
Malicious code in broadcast-bot-web (npm)
- Jun 20, 2022
Malware in instacart-javascript
1 compromised version
- Jun 20, 2022
Malware in wickrio-proxy-bot
1 compromised version
- Jun 20, 2022
Malware in broadcast-bot-web
1 compromised version
- Jun 20, 2022
Malware in wickrcrypto
1 compromised version
- Jun 20, 2022
Malicious code in lfb-docs (npm)
- Jun 20, 2022
Malicious code in 3x3s (npm)
- Jun 20, 2022
Malicious code in base-figma-docs (npm)
- Jun 20, 2022
Malicious code in armeria-site (npm)
- Jun 20, 2022
Malware in armeria-site
1 compromised version
- Jun 20, 2022
Malware in 3x3s
1 compromised version
- Jun 20, 2022
Malware in base-figma-docs
1 compromised version
- Jun 20, 2022
Malware in lfb-docs
1 compromised version
- Jun 20, 2022
Malicious code in sqrl-website (npm)
- Jun 20, 2022
Malicious code in sqrl-monorepo (npm)
- Jun 20, 2022
Malicious code in express-4.x-passport-snapchat-example (npm)
- Jun 20, 2022
Malicious code in daglava2 (npm)
- Jun 20, 2022
Malware in sqrl-website
1 compromised version
- Jun 20, 2022
Malware in express-4.x-passport-snapchat-example
1 compromised version
- Jun 20, 2022
Malware in sqrl-monorepo
1 compromised version
- Jun 20, 2022
Malware in daglava2
1 compromised version
- Jun 20, 2022
Malicious code in web-configs (npm)
- Jun 20, 2022
Malicious code in ui-extensions (npm)
- Jun 20, 2022
Malicious code in storykit (npm)
- Jun 20, 2022
Malicious code in cmc-api-workshop (npm)
- Jun 20, 2022
Malicious code in checkout-ui-extensions-template (npm)
- Jun 20, 2022
Malware in storykit
1 compromised version
- Jun 20, 2022
Malware in web-configs
1 compromised version
Page 6466 of 6,634