Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malicious code in duckduckhack.com (npm)
- Jun 20, 2022
Malicious code in duckduckgo_plus (npm)
- Jun 20, 2022
Malicious code in ddg_community_platform (npm)
- Jun 20, 2022
Malware in duckduckhack.com
1 compromised version
- Jun 20, 2022
Malware in duckduckgo_plus
1 compromised version
- Jun 20, 2022
Malware in tracker-radar
1 compromised version
- Jun 20, 2022
Malware in ddg_community_platform
1 compromised version
- Jun 20, 2022
Malicious code in zeroclickinfo-goodies (npm)
- Jun 20, 2022
Malicious code in epamgithubio-bootstrap (npm)
- Jun 20, 2022
Malicious code in e-openflow (npm)
- Jun 20, 2022
Malicious code in angular-dev-test (npm)
- Jun 20, 2022
Malware in e-openflow
1 compromised version
- Jun 20, 2022
Malware in angular-dev-test
1 compromised version
- Jun 20, 2022
Malware in epamgithubio-bootstrap
1 compromised version
- Jun 20, 2022
Malware in zeroclickinfo-goodies
1 compromised version
- Jun 20, 2022
Malicious code in wdl-workspace (npm)
- Jun 20, 2022
Malicious code in new-corgi (npm)
- Jun 20, 2022
Malicious code in near-nftchecker (npm)
- Jun 20, 2022
Malicious code in near-api-server (npm)
- Jun 20, 2022
Malicious code in firecloud-ui (npm)
- Jun 20, 2022
Malware in near-api-server
1 compromised version
- Jun 20, 2022
Malware in wdl-workspace
1 compromised version
- Jun 20, 2022
Malware in near-nftchecker
1 compromised version
- Jun 20, 2022
Malware in firecloud-ui
1 compromised version
- Jun 20, 2022
Malware in new-corgi
1 compromised version
- Jun 20, 2022
Malicious code in ace_authorization_server (npm)
- Jun 20, 2022
Malicious code in mintgate (npm)
- Jun 20, 2022
Malicious code in epam-timebase-datasource (npm)
- Jun 20, 2022
Malware in ace_authorization_server
1 compromised version
- Jun 20, 2022
Malware in mintgate
1 compromised version
- Jun 20, 2022
Malware in epam-timebase-datasource
1 compromised version
- Jun 20, 2022
Malicious code in zkcalendardemo (npm)
- Jun 20, 2022
Malicious code in zkcalendar (npm)
- Jun 20, 2022
Malicious code in zk-build-utils (npm)
- Jun 20, 2022
Malicious code in check-pr-files (npm)
- Jun 20, 2022
Malicious code in appsforhere (npm)
- Jun 20, 2022
Malware in zk-build-utils
1 compromised version
- Jun 20, 2022
Malware in appsforhere
1 compromised version
- Jun 20, 2022
Malware in zkcalendar
1 compromised version
- Jun 20, 2022
Malware in zkcalendardemo
1 compromised version
- Jun 20, 2022
Malware in check-pr-files
1 compromised version
- Jun 20, 2022
Malicious code in vscode-zk-autocomplete (npm)
- Jun 20, 2022
Malicious code in sncicd-tests-run (npm)
- Jun 20, 2022
Malicious code in sncicd-plugin-activate (npm)
- Jun 20, 2022
Malicious code in sncicd-install-app (npm)
- Jun 20, 2022
Malware in sncicd-install-app
1 compromised version
- Jun 20, 2022
Malware in sncicd-plugin-activate
1 compromised version
- Jun 20, 2022
Malware in sncicd-tests-run
1 compromised version
- Jun 20, 2022
Malware in vscode-zk-autocomplete
1 compromised version
- Jun 20, 2022
Malicious code in tslint-blueprint-palantir (npm)
Page 6486 of 6,634