Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,704 total in npm · sorted newest first- Jun 20, 2022
Malicious code in idp-test-test-test (npm)
- Jun 20, 2022
Malicious code in idp-ssr-shell (npm)
- Jun 20, 2022
Malicious code in idp-core-upperfunnel (npm)
- Jun 20, 2022
Malware in idp-test-test-test
1 compromised version
- Jun 20, 2022
Malware in idp-core-upperfunnel
1 compromised version
- Jun 20, 2022
Malware in idp-ssr-shell
1 compromised version
- Jun 20, 2022
Malware in okhsa
1 compromised version
- Jun 20, 2022
Malicious code in klown (npm)
- Jun 20, 2022
Malicious code in eslint-plugin-flipper (npm)
- Jun 20, 2022
Malicious code in com.unity.uiwidgets (npm)
- Jun 20, 2022
Malicious code in com.unity.settings-manager (npm)
- Jun 20, 2022
Malware in com.unity.uiwidgets
1 compromised version
- Jun 20, 2022
Malware in com.unity.settings-manager
1 compromised version
- Jun 20, 2022
Malware in klown
1 compromised version
- Jun 20, 2022
Malware in eslint-plugin-flipper
1 compromised version
- Jun 20, 2022
Malicious code in com.unity.modules.xr (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.wind (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.vr (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.tilemap (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.physics2d (npm)
- Jun 20, 2022
Malware in com.unity.modules.tilemap
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.xr
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.vr
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.wind
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.physics2d
1 compromised version
- Jun 20, 2022
Malicious code in com.unity.modules.video (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.vehicles (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.unitywebrequestwww (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.unitywebrequesttexture (npm)
- Jun 20, 2022
Malware in com.unity.modules.video
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.unitywebrequesttexture
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.vehicles
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.unitywebrequestwww
1 compromised version
- Jun 20, 2022
Malicious code in com.unity.modules.unitywebrequestaudio (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.unitywebrequestassetbundle (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.unitywebrequest (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.unityanalytics (npm)
- Jun 20, 2022
Malware in com.unity.modules.unitywebrequestaudio
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.unityanalytics
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.unitywebrequestassetbundle
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.unitywebrequest
1 compromised version
- Jun 20, 2022
Malicious code in com.unity.modules.umbra (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.uielements (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.ui (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.terrainphysics (npm)
- Jun 20, 2022
Malware in com.unity.modules.uielements
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.terrainphysics
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.umbra
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.ui
1 compromised version
- Jun 20, 2022
Malicious code in com.unity.modules.screencapture (npm)
Page 6499 of 6,635