Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malware in liveshare
1 compromised version
- Jun 20, 2022
Malicious code in itop (npm)
- Jun 20, 2022
Malicious code in infrastructure_skypefeedback_tools (npm)
- Jun 20, 2022
Malicious code in gwac (npm)
- Jun 20, 2022
Malicious code in flocktory (npm)
- Jun 20, 2022
Malicious code in digitalexam (npm)
- Jun 20, 2022
Malware in infrastructure_skypefeedback_tools
1 compromised version
- Jun 20, 2022
Malware in flocktory
1 compromised version
- Jun 20, 2022
Malware in itop
1 compromised version
- Jun 20, 2022
Malware in digitalexam
1 compromised version
- Jun 20, 2022
Malware in gwac
1 compromised version
- Jun 20, 2022
Malicious code in aiweb (npm)
- Jun 20, 2022
Malicious code in com.huawei.app.module.pkg1 (npm)
- Jun 20, 2022
Malicious code in cmshow.qq.com (npm)
- Jun 20, 2022
Malicious code in caspets (npm)
- Jun 20, 2022
Malware in aiweb
1 compromised version
- Jun 20, 2022
Malware in caspets
1 compromised version
- Jun 20, 2022
Malware in com.huawei.app.module.pkg1
1 compromised version
- Jun 20, 2022
Malware in cmshow.qq.com
1 compromised version
- Jun 20, 2022
Malicious code in weixao (npm)
- Jun 20, 2022
Malicious code in simplesamlphp (npm)
- Jun 20, 2022
Malicious code in nixpsweb (npm)
- Jun 20, 2022
Malicious code in josquin-ribbon (npm)
- Jun 20, 2022
Malware in weixao
1 compromised version
- Jun 20, 2022
Malware in simplesamlphp
1 compromised version
- Jun 20, 2022
Malware in nixpsweb
1 compromised version
- Jun 20, 2022
Malware in josquin-ribbon
1 compromised version
- Jun 20, 2022
Malicious code in hippocrates (npm)
- Jun 20, 2022
Malicious code in gap-r (npm)
- Jun 20, 2022
Malicious code in dashticz (npm)
- Jun 20, 2022
Malicious code in cisco-bem-network-test (npm)
- Jun 20, 2022
Malware in hippocrates
1 compromised version
- Jun 20, 2022
Malware in cisco-bem-network-test
1 compromised version
- Jun 20, 2022
Malware in gap-r
1 compromised version
- Jun 20, 2022
Malware in dashticz
1 compromised version
- Jun 20, 2022
Malicious code in shipping-notice-ui-proxy (npm)
- Jun 20, 2022
Malicious code in runeaudio-runeui (npm)
- Jun 20, 2022
Malicious code in mytestnpmaskedrisec (npm)
- Jun 20, 2022
Malicious code in cf-scraper (npm)
- Jun 20, 2022
Malware in runeaudio-runeui
1 compromised version
- Jun 20, 2022
Malware in cf-scraper
1 compromised version
- Jun 20, 2022
Malware in mytestnpmaskedrisec
1 compromised version
- Jun 20, 2022
Malware in shipping-notice-ui-proxy
1 compromised version
- Jun 20, 2022
Malicious code in amorphic-framework (npm)
- Jun 20, 2022
Malicious code in security-poc (npm)
- Jun 20, 2022
Malicious code in intersting_package_bhavik (npm)
- Jun 20, 2022
Malicious code in haven-design-system-static (npm)
- Jun 20, 2022
Malware in security-poc
1 compromised version
- Jun 20, 2022
Malware in intersting_package_bhavik
1 compromised version
- Jun 20, 2022
Malware in amorphic-framework
1 compromised version
Page 6470 of 6,634