Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malicious code in servicenow_cicd_azuredevops (npm)
- Jun 20, 2022
Malicious code in integration-spec-test (npm)
- Jun 20, 2022
Malicious code in heapview (npm)
- Jun 20, 2022
Malware in tslint-blueprint-palantir
1 compromised version
- Jun 20, 2022
Malware in servicenow_cicd_azuredevops
1 compromised version
- Jun 20, 2022
Malware in heapview
1 compromised version
- Jun 20, 2022
Malware in integration-spec-test
1 compromised version
- Jun 20, 2022
Malicious code in the-clojure-worker (npm)
- Jun 20, 2022
Malicious code in super-rentals (npm)
- Jun 20, 2022
Malicious code in rfcs-tooling (npm)
- Jun 20, 2022
Malicious code in record-data-encapsulation-test-app (npm)
- Jun 20, 2022
Malicious code in ember-getowner-polyfill.import (npm)
- Jun 20, 2022
Malware in super-rentals
1 compromised version
- Jun 20, 2022
Malware in rfcs-tooling
1 compromised version
- Jun 20, 2022
Malware in the-clojure-worker
1 compromised version
- Jun 20, 2022
Malware in ember-getowner-polyfill.import
1 compromised version
- Jun 20, 2022
Malware in record-data-encapsulation-test-app
1 compromised version
- Jun 20, 2022
Malicious code in shippo-frontend (npm)
- Jun 20, 2022
Malicious code in privacy-test-pages (npm)
- Jun 20, 2022
Malicious code in ember-font-awesome.no-fa-prefix (npm)
- Jun 20, 2022
Malware in ember-font-awesome.no-fa-prefix
1 compromised version
- Jun 20, 2022
Malware in privacy-test-pages
1 compromised version
- Jun 20, 2022
Malware in shippo-frontend
1 compromised version
- Jun 20, 2022
Malicious code in tracker-surrogates (npm)
- Jun 20, 2022
Malicious code in tracker-radar-collector (npm)
- Jun 20, 2022
Malicious code in snarky-js (npm)
- Jun 20, 2022
Malicious code in react-optimization (npm)
- Jun 20, 2022
Malicious code in duckduckgo-styles (npm)
- Jun 20, 2022
Malware in tracker-surrogates
1 compromised version
- Jun 20, 2022
Malware in tracker-radar-collector
1 compromised version
- Jun 20, 2022
Malware in duckduckgo-styles
1 compromised version
- Jun 20, 2022
Malware in snarky-js
1 compromised version
- Jun 20, 2022
Malware in react-optimization
1 compromised version
- Jun 20, 2022
Malicious code in mina-web3 (npm)
- Jun 20, 2022
Malicious code in hello-oauth-node (npm)
- Jun 20, 2022
Malicious code in docs-2 (npm)
- Jun 20, 2022
Malware in docs-2
1 compromised version
- Jun 20, 2022
Malware in hello-oauth-node
1 compromised version
- Jun 20, 2022
Malware in mina-web3
1 compromised version
- Jun 20, 2022
Malicious code in zkthemes (npm)
- Jun 20, 2022
Malicious code in withboard (npm)
- Jun 20, 2022
Malicious code in serverless-api-partners (npm)
- Jun 20, 2022
Malicious code in reddit-client-lib (npm)
- Jun 20, 2022
Malicious code in launchdarkly (npm)
- Jun 20, 2022
Malware in zkthemes
1 compromised version
- Jun 20, 2022
Malware in reddit-client-lib
1 compromised version
- Jun 20, 2022
Malware in withboard
1 compromised version
- Jun 20, 2022
Malware in serverless-api-partners
1 compromised version
- Jun 20, 2022
Malware in launchdarkly
1 compromised version
- Jun 20, 2022
Malicious code in vscode-stripe (npm)
Page 6487 of 6,634