Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malware in jive-styling-toolkit
1 compromised version
- Jun 20, 2022
Malware in ackage
1 compromised version
- Jun 20, 2022
Malware in mitui-util-fetch
1 compromised version
- Jun 20, 2022
Malicious code in sfdx-plugin-baseline (npm)
- Jun 20, 2022
Malicious code in o-autoinit (npm)
- Jun 20, 2022
Malicious code in o-ads (npm)
- Jun 20, 2022
Malicious code in my_eyeglass_module (npm)
- Jun 20, 2022
Malware in my_eyeglass_module
1 compromised version
- Jun 20, 2022
Malware in sfdx-plugin-baseline
1 compromised version
- Jun 20, 2022
Malware in o-ads
1 compromised version
- Jun 20, 2022
Malware in o-autoinit
1 compromised version
- Jun 20, 2022
Malicious code in testplugin117 (npm)
- Jun 20, 2022
Malicious code in soho-portal (npm)
- Jun 20, 2022
Malicious code in react-native-camera-kit-example (npm)
- Jun 20, 2022
Malicious code in ovh-ovh (npm)
- Jun 20, 2022
Malicious code in ems_landing_page (npm)
- Jun 20, 2022
Malware in testplugin117
1 compromised version
- Jun 20, 2022
Malware in react-native-camera-kit-example
1 compromised version
- Jun 20, 2022
Malware in soho-portal
1 compromised version
- Jun 20, 2022
Malware in ovh-ovh
1 compromised version
- Jun 20, 2022
Malware in ems_landing_page
1 compromised version
- Jun 20, 2022
Malicious code in uiq (npm)
- Jun 20, 2022
Malicious code in supertest333333 (npm)
- Jun 20, 2022
Malicious code in supertest222222 (npm)
- Jun 20, 2022
Malicious code in circonus-statsd-backend (npm)
- Jun 20, 2022
Malware in uiq
1 compromised version
- Jun 20, 2022
Malware in supertest222222
1 compromised version
- Jun 20, 2022
Malware in supertest333333
1 compromised version
- Jun 20, 2022
Malware in circonus-statsd-backend
1 compromised version
- Jun 20, 2022
Malicious code in salesforcedx-shell-utils (npm)
- Jun 20, 2022
Malicious code in randompackagetest123_dep (npm)
- Jun 20, 2022
Malicious code in mapbox-studio-pro-fonts (npm)
- Jun 20, 2022
Malicious code in mapbox-studio-default-fonts (npm)
- Jun 20, 2022
Malware in mapbox-studio-pro-fonts
1 compromised version
- Jun 20, 2022
Malware in salesforcedx-shell-utils
1 compromised version
- Jun 20, 2022
Malware in mapbox-studio-default-fonts
1 compromised version
- Jun 20, 2022
Malware in randompackagetest123_dep
1 compromised version
- Jun 20, 2022
Malicious code in randompackagetest123 (npm)
- Jun 20, 2022
Malicious code in fusion-plugin-font-loading (npm)
- Jun 20, 2022
Malicious code in bitcore-build-zcash (npm)
- Jun 20, 2022
Malware in randompackagetest123
1 compromised version
- Jun 20, 2022
Malware in bitcore-build-zcash
1 compromised version
- Jun 20, 2022
Malware in fusion-plugin-font-loading
1 compromised version
- Jun 20, 2022
Malicious code in upwork-atlas-datasource (npm)
- Jun 20, 2022
Malicious code in qiwi-widget-charaty (npm)
- Jun 20, 2022
Malicious code in datadog-serverless-macro (npm)
- Jun 20, 2022
Malicious code in babel-plugin-inline-gl-constants (npm)
- Jun 20, 2022
Malware in babel-plugin-inline-gl-constants
1 compromised version
- Jun 20, 2022
Malware in qiwi-widget-charaty
1 compromised version
- Jun 20, 2022
Malware in upwork-atlas-datasource
1 compromised version
Page 6479 of 6,634