Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malware in obloq
1 compromised version
- Jun 20, 2022
Malware in rce-with-plugins
1 compromised version
- Jun 20, 2022
Malware in editor-with-wrapper-no-modal
1 compromised version
- Jun 20, 2022
Malicious code in wixapps (npm)
- Jun 20, 2022
Malicious code in wix-form-builder (npm)
- Jun 20, 2022
Malicious code in viewer-with-wrapper (npm)
- Jun 20, 2022
Malicious code in editor-with-wrapper (npm)
- Jun 20, 2022
Malware in editor-with-wrapper
1 compromised version
- Jun 20, 2022
Malware in wixapps
1 compromised version
- Jun 20, 2022
Malware in viewer-with-wrapper
1 compromised version
- Jun 20, 2022
Malware in wix-form-builder
1 compromised version
- Jun 20, 2022
Malicious code in sm-js-sdk (npm)
- Jun 20, 2022
Malicious code in ricos-viewer-no-modal (npm)
- Jun 20, 2022
Malicious code in ricos-editor-no-modal (npm)
- Jun 20, 2022
Malicious code in ricos-docs (npm)
- Jun 20, 2022
Malware in ricos-editor-no-modal
1 compromised version
- Jun 20, 2022
Malware in ricos-viewer-no-modal
1 compromised version
- Jun 20, 2022
Malware in ricos-docs
1 compromised version
- Jun 20, 2022
Malware in sm-js-sdk
1 compromised version
- Jun 20, 2022
Malicious code in wix-users (npm)
- Jun 20, 2022
Malicious code in klokl-nirob (npm)
- Jun 20, 2022
Malicious code in js-wixcode-sdk (npm)
- Jun 20, 2022
Malicious code in fucking-n-pack (npm)
- Jun 20, 2022
Malware in fucking-n-pack
1 compromised version
- Jun 20, 2022
Malware in klokl-nirob
1 compromised version
- Jun 20, 2022
Malware in js-wixcode-sdk
1 compromised version
- Jun 20, 2022
Malware in wix-users
1 compromised version
- Jun 20, 2022
Malicious code in noblox.js-promise (npm)
- Jun 20, 2022
Malicious code in kbn-ui-shared-deps (npm)
- Jun 20, 2022
Malicious code in kbn-analytics (npm)
- Jun 20, 2022
Malicious code in intena_pkg_for_hs (npm)
- Jun 20, 2022
Malware in noblox.js-promise
1 compromised version
- Jun 20, 2022
Malware in kbn-analytics
1 compromised version
- Jun 20, 2022
Malware in intena_pkg_for_hs
1 compromised version
- Jun 20, 2022
Malware in kbn-ui-shared-deps
1 compromised version
- Jun 20, 2022
Malicious code in oppo_web_app (npm)
- Jun 20, 2022
Malicious code in kbn-i18n (npm)
- Jun 20, 2022
Malicious code in gd-sentry (npm)
- Jun 20, 2022
Malicious code in axis-components (npm)
- Jun 20, 2022
Malware in oppo_web_app
1 compromised version
- Jun 20, 2022
Malware in kbn-i18n
1 compromised version
- Jun 20, 2022
Malware in gd-sentry
1 compromised version
- Jun 20, 2022
Malware in axis-components
1 compromised version
- Jun 20, 2022
Malicious code in xfi-client-core (npm)
- Jun 20, 2022
Malicious code in safari-prevent-zoom (npm)
- Jun 20, 2022
Malicious code in react-table-next (npm)
- Jun 20, 2022
Malicious code in react-table-7 (npm)
- Jun 20, 2022
Malware in react-table-7
1 compromised version
- Jun 20, 2022
Malware in xfi-client-core
1 compromised version
- Jun 20, 2022
Malware in react-table-next
1 compromised version
Page 6468 of 6,634