Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,681 total in npm · sorted newest first- Jun 20, 2022
Malicious code in native-utils (npm)
- Jun 20, 2022
Malicious code in @exness/select-component-ab (npm)
- Jun 20, 2022
Malware in @answers/exp-id-tools
1 compromised version
- Jun 20, 2022
Malware in native-utils
1 compromised version
- Jun 20, 2022
Malware in @exness/select-component-ab
1 compromised version
- Jun 20, 2022
Malware in @aadiam/ibiza-search
1 compromised version
- Jun 20, 2022
Malicious code in relap-widgets (npm)
- Jun 20, 2022
Malicious code in relap-ui (npm)
- Jun 20, 2022
Malicious code in @relap/kit (npm)
- Jun 20, 2022
Malicious code in dig-fonts (npm)
- Jun 20, 2022
Malware in dig-fonts
1 compromised version
- Jun 20, 2022
Malware in @relap/kit
1 compromised version
- Jun 20, 2022
Malware in relap-ui
1 compromised version
- Jun 20, 2022
Malware in relap-widgets
1 compromised version
- Jun 20, 2022
Malicious code in spectrum-arbor (npm)
- Jun 20, 2022
Malicious code in retrieval-components (npm)
- Jun 20, 2022
Malicious code in dig-illustrations (npm)
- Jun 20, 2022
Malicious code in deep-integrations (npm)
- Jun 20, 2022
Malware in deep-integrations
1 compromised version
- Jun 20, 2022
Malware in dig-illustrations
1 compromised version
- Jun 20, 2022
Malware in retrieval-components
1 compromised version
- Jun 20, 2022
Malware in spectrum-arbor
1 compromised version
- Jun 20, 2022
Malicious code in mrg-form (npm)
- Jun 20, 2022
Malicious code in mrg-device-tools (npm)
- Jun 20, 2022
Malicious code in guest-payment (npm)
- Jun 20, 2022
Malicious code in gd-i18n-lib (npm)
- Jun 20, 2022
Malicious code in emerald-vue (npm)
- Jun 20, 2022
Malware in gd-i18n-lib
1 compromised version
- Jun 20, 2022
Malware in emerald-vue
1 compromised version
- Jun 20, 2022
Malware in mrg-form
1 compromised version
- Jun 20, 2022
Malware in guest-payment
1 compromised version
- Jun 20, 2022
Malware in mrg-device-tools
1 compromised version
- Jun 20, 2022
Malicious code in toolkit-common (npm)
- Jun 20, 2022
Malicious code in product-tools (npm)
- Jun 20, 2022
Malicious code in mrg-smokescreen (npm)
- Jun 20, 2022
Malicious code in blocks-cloud (npm)
- Jun 20, 2022
Malware in toolkit-common
1 compromised version
- Jun 20, 2022
Malware in mrg-smokescreen
1 compromised version
- Jun 20, 2022
Malware in blocks-cloud
1 compromised version
- Jun 20, 2022
Malware in product-tools
1 compromised version
- Jun 20, 2022
Malicious code in afisha-guides-landing (npm)
- Jun 20, 2022
Malicious code in tribe-translation (npm)
- Jun 20, 2022
Malicious code in tesla-commerce-ui (npm)
- Jun 20, 2022
Malicious code in richmediacore (npm)
- Jun 20, 2022
Malware in tribe-translation
1 compromised version
- Jun 20, 2022
Malware in richmediacore
1 compromised version
- Jun 20, 2022
Malware in afisha-guides-landing
1 compromised version
- Jun 20, 2022
Malware in tesla-commerce-ui
1 compromised version
- Jun 20, 2022
Malicious code in tribe-api (npm)
- Jun 20, 2022
Malicious code in geoadv-linters (npm)
Page 6507 of 6,634