Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malware in cmc-api-workshop
1 compromised version
- Jun 20, 2022
Malware in checkout-ui-extensions-template
1 compromised version
- Jun 20, 2022
Malware in ui-extensions
1 compromised version
- Jun 20, 2022
Malicious code in vimeo_maxmsp (npm)
- Jun 20, 2022
Malicious code in ff-webstore-e2e (npm)
- Jun 20, 2022
Malicious code in e2open-design-system (npm)
- Jun 20, 2022
Malicious code in brightspot-express (npm)
- Jun 20, 2022
Malware in vimeo_maxmsp
1 compromised version
- Jun 20, 2022
Malware in ff-webstore-e2e
1 compromised version
- Jun 20, 2022
Malware in brightspot-express
1 compromised version
- Jun 20, 2022
Malware in e2open-design-system
1 compromised version
- Jun 20, 2022
Malicious code in nuget.moq (npm)
- Jun 20, 2022
Malicious code in looker-action-hub (npm)
- Jun 20, 2022
Malicious code in everest-contracts (npm)
- Jun 20, 2022
Malicious code in calling-component-bindings (npm)
- Jun 20, 2022
Malware in looker-action-hub
1 compromised version
- Jun 20, 2022
Malware in nuget.moq
1 compromised version
- Jun 20, 2022
Malware in everest-contracts
1 compromised version
- Jun 20, 2022
Malware in calling-component-bindings
1 compromised version
- Jun 20, 2022
Malicious code in tulip-backend (npm)
- Jun 20, 2022
Malicious code in stripe-samples (npm)
- Jun 20, 2022
Malicious code in dependency-with-range (npm)
- Jun 20, 2022
Malicious code in cornershop-chat (npm)
- Jun 20, 2022
Malware in cornershop-chat
1 compromised version
- Jun 20, 2022
Malware in tulip-backend
1 compromised version
- Jun 20, 2022
Malware in dependency-with-range
1 compromised version
- Jun 20, 2022
Malware in stripe-samples
1 compromised version
- Jun 20, 2022
Malicious code in yhint (npm)
- Jun 20, 2022
Malicious code in txwrapper-acala (npm)
- Jun 20, 2022
Malicious code in bunny-v3 (npm)
- Jun 20, 2022
Malicious code in arbos-contracts (npm)
- Jun 20, 2022
Malware in txwrapper-acala
1 compromised version
- Jun 20, 2022
Malware in bunny-v3
1 compromised version
- Jun 20, 2022
Malware in yhint
1 compromised version
- Jun 20, 2022
Malware in arbos-contracts
1 compromised version
- Jun 20, 2022
Malicious code in grunt-scratchy (npm)
- Jun 20, 2022
Malicious code in gaia-dialog (npm)
- Jun 20, 2022
Malicious code in gaia-component (npm)
- Jun 20, 2022
Malicious code in carpenter-api-client (npm)
- Jun 20, 2022
Malware in gaia-dialog
1 compromised version
- Jun 20, 2022
Malware in grunt-scratchy
1 compromised version
- Jun 20, 2022
Malware in carpenter-api-client
1 compromised version
- Jun 20, 2022
Malware in gaia-component
1 compromised version
- Jun 20, 2022
Malicious code in rcv-with-plugins (npm)
- Jun 20, 2022
Malicious code in rce-with-plugins (npm)
- Jun 20, 2022
Malicious code in obloq (npm)
- Jun 20, 2022
Malicious code in mynpmpackage-njs (npm)
- Jun 20, 2022
Malicious code in editor-with-wrapper-no-modal (npm)
- Jun 20, 2022
Malware in mynpmpackage-njs
1 compromised version
- Jun 20, 2022
Malware in rcv-with-plugins
1 compromised version
Page 6467 of 6,634