Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,769 total in npm · sorted newest first- Jun 20, 2022
Malicious code in tinkoff-offers (npm)
- Jun 20, 2022
Malicious code in arui-logger (npm)
- Jun 20, 2022
Malware in tinkoff-offers
1 compromised version
- Jun 20, 2022
Malware in alfaform-core-ui
1 compromised version
- Jun 20, 2022
Malware in arui-logger
1 compromised version
- Jun 20, 2022
Malware in afisha-common
1 compromised version
- Jun 20, 2022
Malicious code in thrift-services (npm)
- Jun 20, 2022
Malicious code in newclick-composite-components (npm)
- Jun 20, 2022
Malicious code in newclick-components (npm)
- Jun 20, 2022
Malicious code in arui-private (npm)
- Jun 20, 2022
Malicious code in arui-ft-private (npm)
- Jun 20, 2022
Malware in thrift-services
1 compromised version
- Jun 20, 2022
Malware in newclick-components
1 compromised version
- Jun 20, 2022
Malware in arui-private
1 compromised version
- Jun 20, 2022
Malware in newclick-composite-components
1 compromised version
- Jun 20, 2022
Malware in arui-ft-private
1 compromised version
- Jun 20, 2022
Malicious code in tinkoff-form-builder (npm)
- Jun 20, 2022
Malicious code in sportsbook-frontend-integration (npm)
- Jun 20, 2022
Malicious code in corporate-services (npm)
- Jun 20, 2022
Malicious code in babel-plugin-transform-require-ensure (npm)
- Jun 20, 2022
Malware in tinkoff-form-builder
1 compromised version
- Jun 20, 2022
Malware in corporate-services
1 compromised version
- Jun 20, 2022
Malware in sportsbook-frontend-integration
1 compromised version
- Jun 20, 2022
Malware in babel-plugin-transform-require-ensure
1 compromised version
- Jun 20, 2022
Malicious code in eva.io-core (npm)
- Jun 20, 2022
Malicious code in eslint-plugin-tinkoff (npm)
- Jun 20, 2022
Malicious code in dippy (npm)
- Jun 20, 2022
Malicious code in browser-timings (npm)
- Jun 20, 2022
Malware in dippy
1 compromised version
- Jun 20, 2022
Malware in eva.io-core
1 compromised version
- Jun 20, 2022
Malware in browser-timings
1 compromised version
- Jun 20, 2022
Malware in eslint-plugin-tinkoff
1 compromised version
- Jun 20, 2022
Malicious code in router-way (npm)
- Jun 20, 2022
Malicious code in route-train (npm)
- Jun 20, 2022
Malicious code in page-blocks (npm)
- Jun 20, 2022
Malicious code in eva.io-docker (npm)
- Jun 20, 2022
Malware in eva.io-docker
1 compromised version
- Jun 20, 2022
Malware in page-blocks
1 compromised version
- Jun 20, 2022
Malware in router-way
1 compromised version
- Jun 20, 2022
Malware in route-train
1 compromised version
- Jun 20, 2022
Malicious code in tinkoff-push-web (npm)
- Jun 20, 2022
Malicious code in tinkoff-insurance-utils (npm)
- Jun 20, 2022
Malicious code in express-uatraits (npm)
- Jun 20, 2022
Malicious code in express-blackbox (npm)
- Jun 20, 2022
Malware in tinkoff-push-web
1 compromised version
- Jun 20, 2022
Malware in express-blackbox
1 compromised version
- Jun 20, 2022
Malware in express-uatraits
1 compromised version
- Jun 20, 2022
Malware in tinkoff-insurance-utils
1 compromised version
- Jun 20, 2022
Malicious code in yandex-csrf (npm)
- Jun 20, 2022
Malicious code in tvmtool-bin (npm)
Page 6497 of 6,636