Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malicious code in appsuite-mailvelope (npm)
- Jun 20, 2022
Malware in update-themes
1 compromised version
- Jun 20, 2022
Malware in appsuite-mailvelope
1 compromised version
- Jun 20, 2022
Malware in open-xchange-guidedtours
1 compromised version
- Jun 20, 2022
Malware in oxapi-documentations-build-script
1 compromised version
- Jun 20, 2022
Malicious code in open-xchange-appsuite-spamexperts (npm)
- Jun 20, 2022
Malicious code in mattermost-qa-automation (npm)
- Jun 20, 2022
Malicious code in mattermost-mobile (npm)
- Jun 20, 2022
Malicious code in eslint-config-mattermost (npm)
- Jun 20, 2022
Malware in mattermost-mobile
1 compromised version
- Jun 20, 2022
Malware in eslint-config-mattermost
1 compromised version
- Jun 20, 2022
Malware in mattermost-qa-automation
1 compromised version
- Jun 20, 2022
Malware in open-xchange-appsuite-spamexperts
1 compromised version
- Jun 20, 2022
Malicious code in mattermost-push-proxy (npm)
- Jun 20, 2022
Malicious code in mattermost-mobile-e2e (npm)
- Jun 20, 2022
Malicious code in mattermost-metrics-server (npm)
- Jun 20, 2022
Malicious code in mattermost-chrome-extension (npm)
- Jun 20, 2022
Malicious code in focalboard (npm)
- Jun 20, 2022
Malware in mattermost-push-proxy
1 compromised version
- Jun 20, 2022
Malware in mattermost-mobile-e2e
1 compromised version
- Jun 20, 2022
Malware in focalboard
1 compromised version
- Jun 20, 2022
Malware in mattermost-metrics-server
1 compromised version
- Jun 20, 2022
Malware in mattermost-chrome-extension
1 compromised version
- Jun 20, 2022
Malicious code in mstmeetings (npm)
- Jun 20, 2022
Malicious code in mattermost-webapp-profiling (npm)
- Jun 20, 2022
Malicious code in mattermost-plugin-docs (npm)
- Jun 20, 2022
Malicious code in mattermost-api-reference (npm)
- Jun 20, 2022
Malware in mattermost-webapp-profiling
1 compromised version
- Jun 20, 2022
Malware in mattermost-api-reference
1 compromised version
- Jun 20, 2022
Malware in mattermost-plugin-docs
1 compromised version
- Jun 20, 2022
Malware in mstmeetings
1 compromised version
- Jun 20, 2022
Malicious code in skype4business (npm)
- Jun 20, 2022
Malicious code in nextcloud-register (npm)
- Jun 20, 2022
Malicious code in nextcloud-mail (npm)
- Jun 20, 2022
Malicious code in firstrunwizard (npm)
- Jun 20, 2022
Malware in firstrunwizard
1 compromised version
- Jun 20, 2022
Malware in skype4business
1 compromised version
- Jun 20, 2022
Malware in nextcloud-mail
1 compromised version
- Jun 20, 2022
Malware in nextcloud-register
1 compromised version
- Jun 20, 2022
Malicious code in suspicious_login (npm)
- Jun 20, 2022
Malicious code in nextcloud-news (npm)
- Jun 20, 2022
Malicious code in nextcloud-cookbook (npm)
- Jun 20, 2022
Malicious code in nextcloud-activity (npm)
- Jun 20, 2022
Malware in nextcloud-cookbook
1 compromised version
- Jun 20, 2022
Malware in nextcloud-activity
1 compromised version
- Jun 20, 2022
Malware in suspicious_login
1 compromised version
- Jun 20, 2022
Malware in nextcloud-news
1 compromised version
- Jun 20, 2022
Malicious code in ojsxc (npm)
- Jun 20, 2022
Malicious code in officeonline (npm)
- Jun 20, 2022
Malicious code in nextcloudappstore (npm)
Page 6475 of 6,634