Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malware in buildstamp-monorepo
1 compromised version
- Jun 20, 2022
Malicious code in web-frontend (npm)
- Jun 20, 2022
Malicious code in twitter-webhook-boilerplate-node (npm)
- Jun 20, 2022
Malicious code in spotatweet (npm)
- Jun 20, 2022
Malicious code in remote-developer-jobs-analytics (npm)
- Jun 20, 2022
Malware in web-frontend
1 compromised version
- Jun 20, 2022
Malware in remote-developer-jobs-analytics
1 compromised version
- Jun 20, 2022
Malware in spotatweet
1 compromised version
- Jun 20, 2022
Malware in twitter-webhook-boilerplate-node
1 compromised version
- Jun 20, 2022
Malicious code in dr-json (npm)
- Jun 20, 2022
Malicious code in dodo-build (npm)
- Jun 20, 2022
Malicious code in com.innogames.asset-relations-viewer-addressables (npm)
- Jun 20, 2022
Malicious code in com.innogames.asset-relations-viewer (npm)
- Jun 20, 2022
Malware in com.innogames.asset-relations-viewer
1 compromised version
- Jun 20, 2022
Malware in com.innogames.asset-relations-viewer-addressables
1 compromised version
- Jun 20, 2022
Malware in dr-json
1 compromised version
- Jun 20, 2022
Malware in dodo-build
1 compromised version
- Jun 20, 2022
Malicious code in mrmax4o4 (npm)
- Jun 20, 2022
Malicious code in mrmax (npm)
- Jun 20, 2022
Malicious code in check-my-repo (npm)
- Jun 20, 2022
Malicious code in blank-ts-repo (npm)
- Jun 20, 2022
Malware in blank-ts-repo
1 compromised version
- Jun 20, 2022
Malware in check-my-repo
1 compromised version
- Jun 20, 2022
Malware in mrmax
1 compromised version
- Jun 20, 2022
Malware in mrmax4o4
1 compromised version
- Jun 20, 2022
Malicious code in sharded-redis-client (npm)
- Jun 20, 2022
Malicious code in mkr-vote-proxy (npm)
- Jun 20, 2022
Malicious code in gtt-ui (npm)
- Jun 20, 2022
Malicious code in asls (npm)
- Jun 20, 2022
Malware in gtt-ui
1 compromised version
- Jun 20, 2022
Malware in mkr-vote-proxy
1 compromised version
- Jun 20, 2022
Malware in asls
1 compromised version
- Jun 20, 2022
Malware in sharded-redis-client
1 compromised version
- Jun 20, 2022
Malicious code in admin-ui-extensions-template (npm)
- Jun 20, 2022
Malicious code in argo-checkout-template (npm)
- Jun 20, 2022
Malicious code in app_bridge_auth (npm)
- Jun 20, 2022
Malicious code in 0-shadowenv (npm)
- Jun 20, 2022
Malware in app_bridge_auth
1 compromised version
- Jun 20, 2022
Malware in argo-checkout-template
1 compromised version
- Jun 20, 2022
Malware in admin-ui-extensions-template
1 compromised version
- Jun 20, 2022
Malware in 0-shadowenv
1 compromised version
- Jun 20, 2022
Malicious code in ajax-env (npm)
- Jun 20, 2022
Malicious code in advanced-wp-debugger (npm)
- Jun 20, 2022
Malicious code in oss-contribution-tracker (npm)
- Jun 20, 2022
Malicious code in ion-extension (npm)
- Jun 20, 2022
Malware in ajax-env
1 compromised version
- Jun 20, 2022
Malware in oss-contribution-tracker
1 compromised version
- Jun 20, 2022
Malware in ion-extension
1 compromised version
- Jun 20, 2022
Malware in advanced-wp-debugger
1 compromised version
- Jun 20, 2022
Malicious code in amazonlauncherintegration (npm)
Page 6484 of 6,634