Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,681 total in npm · sorted newest first- Jun 20, 2022
Malicious code in dependency-from-npm (npm)
- Jun 20, 2022
Malware in dependency-from-npm
1 compromised version
- Jun 20, 2022
Malware in plugin-typings
1 compromised version
- Jun 20, 2022
Malware in generatedloggerutils
1 compromised version
- Jun 20, 2022
Malware in figma-scripts
1 compromised version
- Jun 20, 2022
Malware in fb-arcanist-rpc
1 compromised version
- Jun 20, 2022
Malicious code in nuclide-marshalers-client (npm)
- Jun 20, 2022
Malicious code in @maalik/logger (npm)
- Jun 20, 2022
Malicious code in fb-graphql-compiler (npm)
- Jun 20, 2022
Malicious code in express-checkout-sdk (npm)
- Jun 20, 2022
Malware in nuclide-marshalers-client
1 compromised version
- Jun 20, 2022
Malware in fb-graphql-compiler
1 compromised version
- Jun 20, 2022
Malware in @maalik/logger
1 compromised version
- Jun 20, 2022
Malware in express-checkout-sdk
1 compromised version
- Jun 20, 2022
Malicious code in p2p-amount-field (npm)
- Jun 20, 2022
Malicious code in its_for_testing (npm)
- Jun 20, 2022
Malicious code in hdproxy-w3 (npm)
- Jun 20, 2022
Malicious code in grunt-agnitas (npm)
- Jun 20, 2022
Malicious code in gen-ts-googleapis (npm)
- Jun 20, 2022
Malware in p2p-amount-field
1 compromised version
- Jun 20, 2022
Malware in grunt-agnitas
1 compromised version
- Jun 20, 2022
Malware in gen-ts-googleapis
1 compromised version
- Jun 20, 2022
Malware in its_for_testing
1 compromised version
- Jun 20, 2022
Malware in hdproxy-w3
1 compromised version
- Jun 20, 2022
Malicious code in soheb (npm)
- Jun 20, 2022
Malicious code in @sugoma/amogus (npm)
- Jun 20, 2022
Malicious code in cookie-banner-vue (npm)
- Jun 20, 2022
Malware in soheb
1 compromised version
- Jun 20, 2022
Malware in @sugoma/amogus
1 compromised version
- Jun 20, 2022
Malware in cookie-banner-vue
1 compromised version
- Jun 20, 2022
Malicious code in @adamharrison/ecff60e3-0f15-4e57-a7b6-64e116738df3 (npm)
- Jun 20, 2022
Malicious code in @ljon/meterpreter-backdoor (npm)
- Jun 20, 2022
Malicious code in discordjs-selfv11 (npm)
- Jun 20, 2022
Malicious code in dade-murphys-package (npm)
- Jun 20, 2022
Malicious code in ciding_nfc (npm)
- Jun 20, 2022
Malware in dade-murphys-package
1 compromised version
- Jun 20, 2022
Malware in @adamharrison/ecff60e3-0f15-4e57-a7b6-64e116738df3
1 compromised version
- Jun 20, 2022
Malware in ciding_nfc
1 compromised version
- Jun 20, 2022
Malware in discordjs-selfv11
1 compromised version
- Jun 20, 2022
Malware in @ljon/meterpreter-backdoor
1 compromised version
- Jun 20, 2022
Malicious code in odinl0j01 (npm)
- Jun 20, 2022
Malicious code in formsg (npm)
- Jun 20, 2022
Malicious code in compositionend (npm)
- Jun 20, 2022
Malware in formsg
1 compromised version
- Jun 20, 2022
Malware in odinl0j01
1 compromised version
- Jun 20, 2022
Malware in compositionend
1 compromised version
- Jun 20, 2022
Malicious code in ofjaaahtwitch (npm)
- Jun 20, 2022
Malicious code in mostly-harmless (npm)
- Jun 20, 2022
Malicious code in hmatata (npm)
- Jun 20, 2022
Malicious code in big-towel (npm)
Page 6509 of 6,634