Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malware in datadog-serverless-macro
1 compromised version
- Jun 20, 2022
Malicious code in zilwrap-sdk (npm)
- Jun 20, 2022
Malicious code in calc_y5wqxinecc (npm)
- Jun 20, 2022
Malicious code in calc_pci3vj0xqv (npm)
- Jun 20, 2022
Malicious code in bitmex-local-proxy (npm)
- Jun 20, 2022
Malware in calc_pci3vj0xqv
1 compromised version
- Jun 20, 2022
Malware in bitmex-local-proxy
1 compromised version
- Jun 20, 2022
Malware in calc_y5wqxinecc
1 compromised version
- Jun 20, 2022
Malware in zilwrap-sdk
1 compromised version
- Jun 20, 2022
Malicious code in mason-auth-middleware (npm)
- Jun 20, 2022
Malicious code in evil-package-no-install (npm)
- Jun 20, 2022
Malicious code in daas-rce-1 (npm)
- Jun 20, 2022
Malicious code in calc_t7x506bhe5 (npm)
- Jun 20, 2022
Malware in daas-rce-1
1 compromised version
- Jun 20, 2022
Malware in calc_t7x506bhe5
1 compromised version
- Jun 20, 2022
Malware in evil-package-no-install
1 compromised version
- Jun 20, 2022
Malware in mason-auth-middleware
1 compromised version
- Jun 20, 2022
Malicious code in secrets-sync-action (npm)
- Jun 20, 2022
Malicious code in scrollytell (npm)
- Jun 20, 2022
Malicious code in schedviz (npm)
- Jun 20, 2022
Malicious code in npm-rce-hackerone-corraldev (npm)
- Jun 20, 2022
Malicious code in @coderscamp/eslint-plugin (npm)
- Jun 20, 2022
Malware in secrets-sync-action
1 compromised version
- Jun 20, 2022
Malware in schedviz
1 compromised version
- Jun 20, 2022
Malware in scrollytell
1 compromised version
- Jun 20, 2022
Malware in @coderscamp/eslint-plugin
1 compromised version
- Jun 20, 2022
Malware in npm-rce-hackerone-corraldev
1 compromised version
- Jun 20, 2022
Malicious code in shaka-streamer (npm)
- Jun 20, 2022
Malicious code in service-worker-detector (npm)
- Jun 20, 2022
Malicious code in seo-pwa (npm)
- Jun 20, 2022
Malicious code in selinux-policy-languages (npm)
- Jun 20, 2022
Malware in selinux-policy-languages
1 compromised version
- Jun 20, 2022
Malware in seo-pwa
1 compromised version
- Jun 20, 2022
Malware in service-worker-detector
1 compromised version
- Jun 20, 2022
Malware in shaka-streamer
1 compromised version
- Jun 20, 2022
Malicious code in vulncode-db404 (npm)
- Jun 20, 2022
Malicious code in vscode-bigquery (npm)
- Jun 20, 2022
Malicious code in trillian-website (npm)
- Jun 20, 2022
Malicious code in tech-doc-hugo (npm)
- Jun 20, 2022
Malware in trillian-website
1 compromised version
- Jun 20, 2022
Malware in vscode-bigquery
1 compromised version
- Jun 20, 2022
Malware in tech-doc-hugo
1 compromised version
- Jun 20, 2022
Malware in vulncode-db404
1 compromised version
- Jun 20, 2022
Malicious code in zazu-nam (npm)
- Jun 20, 2022
Malicious code in wikiloop-doublecheck (npm)
- Jun 20, 2022
Malicious code in webfundamentals (npm)
- Jun 20, 2022
Malicious code in web-stories-wp (npm)
- Jun 20, 2022
Malware in wikiloop-doublecheck
1 compromised version
- Jun 20, 2022
Malware in web-stories-wp
1 compromised version
- Jun 20, 2022
Malware in webfundamentals
1 compromised version
Page 6480 of 6,634