Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malicious code in myjohndeereapi-oauth2-nodejs-example (npm)
- Jun 20, 2022
Malicious code in myetherwallet (npm)
- Jun 20, 2022
Malicious code in firestore-stripe-payments-js (npm)
- Jun 20, 2022
Malware in myetherwallet
1 compromised version
- Jun 20, 2022
Malware in myjohndeereapi-oauth2-nodejs-example
1 compromised version
- Jun 20, 2022
Malware in firestore-stripe-payments-js
1 compromised version
- Jun 20, 2022
Malware in vscode-stripe
1 compromised version
- Jun 20, 2022
Malicious code in xendke-io (npm)
- Jun 20, 2022
Malicious code in superapp-sdk (npm)
- Jun 20, 2022
Malicious code in snapshot-hub (npm)
- Jun 20, 2022
Malicious code in paypal-sdk-spec (npm)
- Jun 20, 2022
Malware in superapp-sdk
1 compromised version
- Jun 20, 2022
Malware in paypal-sdk-spec
1 compromised version
- Jun 20, 2022
Malware in xendke-io
1 compromised version
- Jun 20, 2022
Malware in snapshot-hub
1 compromised version
- Jun 20, 2022
Malicious code in tslint-test-configs (npm)
- Jun 20, 2022
Malicious code in landing-app (npm)
- Jun 20, 2022
Malicious code in eslint-config-dev-palantir (npm)
- Jun 20, 2022
Malicious code in eclipse-tslint (npm)
- Jun 20, 2022
Malware in eclipse-tslint
1 compromised version
- Jun 20, 2022
Malware in landing-app
1 compromised version
- Jun 20, 2022
Malware in tslint-test-configs
1 compromised version
- Jun 20, 2022
Malware in eslint-config-dev-palantir
1 compromised version
- Jun 20, 2022
Malicious code in typescript-action (npm)
- Jun 20, 2022
Malicious code in lclbeautyboutiqueprod (npm)
- Jun 20, 2022
Malicious code in callrail_eks (npm)
- Jun 20, 2022
Malicious code in callrail-package-cleanup (npm)
- Jun 20, 2022
Malware in callrail-package-cleanup
1 compromised version
- Jun 20, 2022
Malware in lclbeautyboutiqueprod
1 compromised version
- Jun 20, 2022
Malware in callrail_eks
1 compromised version
- Jun 20, 2022
Malware in typescript-action
1 compromised version
- Jun 20, 2022
Malicious code in hello-kubeless (npm)
- Jun 20, 2022
Malicious code in gulp-pypugjs (npm)
- Jun 20, 2022
Malicious code in grabathon-v7 (npm)
- Jun 20, 2022
Malicious code in github-action-benchmark (npm)
- Jun 20, 2022
Malware in gulp-pypugjs
1 compromised version
- Jun 20, 2022
Malware in grabathon-v7
1 compromised version
- Jun 20, 2022
Malware in github-action-benchmark
1 compromised version
- Jun 20, 2022
Malware in hello-kubeless
1 compromised version
- Jun 20, 2022
Malicious code in amnotacat (npm)
- Jun 20, 2022
Malicious code in adobetagmanager (npm)
- Jun 20, 2022
Malicious code in popover2 (npm)
- Jun 20, 2022
Malicious code in docs-data (npm)
- Jun 20, 2022
Malware in amnotacat
1 compromised version
- Jun 20, 2022
Malware in docs-data
1 compromised version
- Jun 20, 2022
Malware in adobetagmanager
1 compromised version
- Jun 20, 2022
Malware in popover2
1 compromised version
- Jun 20, 2022
Malicious code in sourcekit-lsp (npm)
- Jun 20, 2022
Malicious code in hybrismetrics (npm)
- Jun 20, 2022
Malicious code in eslint-plugin-amphtml-internal (npm)
Page 6488 of 6,634