Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,680 total in npm · sorted newest first- Jun 20, 2022
Malicious code in doyentest (npm)
- Jun 20, 2022
Malware in doyentest
1 compromised version
- Jun 20, 2022
Malware in sourcekit-lsp
1 compromised version
- Jun 20, 2022
Malware in eslint-plugin-amphtml-internal
1 compromised version
- Jun 20, 2022
Malware in hybrismetrics
1 compromised version
- Jun 20, 2022
Malicious code in test-za-sec-psh (npm)
- Jun 20, 2022
Malicious code in oz-select-lib2 (npm)
- Jun 20, 2022
Malicious code in kg_portal (npm)
- Jun 20, 2022
Malicious code in ember-dev (npm)
- Jun 20, 2022
Malicious code in elemental-layout (npm)
- Jun 20, 2022
Malware in elemental-layout
1 compromised version
- Jun 20, 2022
Malware in kg_portal
1 compromised version
- Jun 20, 2022
Malware in oz-select-lib2
1 compromised version
- Jun 20, 2022
Malware in test-za-sec-psh
1 compromised version
- Jun 20, 2022
Malware in ember-dev
1 compromised version
- Jun 20, 2022
Malicious code in uber-i18n (npm)
- Jun 20, 2022
Malicious code in tochka-cyclops-api (npm)
- Jun 20, 2022
Malicious code in ozone-api (npm)
- Jun 20, 2022
Malicious code in billpay-mobile (npm)
- Jun 20, 2022
Malware in ozone-api
1 compromised version
- Jun 20, 2022
Malware in tochka-cyclops-api
1 compromised version
- Jun 20, 2022
Malware in billpay-mobile
1 compromised version
- Jun 20, 2022
Malware in uber-i18n
1 compromised version
- Jun 20, 2022
Malicious code in ozone-material (npm)
- Jun 20, 2022
Malicious code in ozone-logic (npm)
- Jun 20, 2022
Malicious code in ozone-helper (npm)
- Jun 20, 2022
Malicious code in microsoft-internq (npm)
- Jun 20, 2022
Malware in ozone-logic
1 compromised version
- Jun 20, 2022
Malware in microsoft-internq
1 compromised version
- Jun 20, 2022
Malware in ozone-material
1 compromised version
- Jun 20, 2022
Malware in ozone-helper
1 compromised version
- Jun 20, 2022
Malicious code in wavoip (npm)
- Jun 20, 2022
Malicious code in ql-win32 (npm)
- Jun 20, 2022
Malicious code in omar-evil-test-rpp (npm)
- Jun 20, 2022
Malicious code in debugger-evil-lib (npm)
- Jun 20, 2022
Malware in omar-evil-test-rpp
1 compromised version
- Jun 20, 2022
Malware in debugger-evil-lib
1 compromised version
- Jun 20, 2022
Malware in ql-win32
1 compromised version
- Jun 20, 2022
Malware in wavoip
1 compromised version
- Jun 20, 2022
Malicious code in @xjs-shared-components/all-components (npm)
- Jun 20, 2022
Malicious code in @bootstrap-base-nabtrade-design/components (npm)
- Jun 20, 2022
Malicious code in @bootstrap-base-managed-designs/bootstrap-nabtraderedesign (npm)
- Jun 20, 2022
Malicious code in @bootstrap-base-design/bootstrap-base (npm)
- Jun 20, 2022
Malware in @xjs-shared-components/all-components
1 compromised version
- Jun 20, 2022
Malware in @bootstrap-base-nabtrade-design/components
1 compromised version
- Jun 20, 2022
Malware in @bootstrap-base-design/bootstrap-base
1 compromised version
- Jun 20, 2022
Malware in @bootstrap-base-managed-designs/bootstrap-nabtraderedesign
1 compromised version
- Jun 20, 2022
Malicious code in nab-trade (npm)
- Jun 20, 2022
Malicious code in @nab-trade/mnt-prod (npm)
- Jun 20, 2022
Malicious code in bootstrap-nabtraderedesign (npm)
Page 6489 of 6,634