Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,681 total in npm · sorted newest first- Jun 20, 2022
Malware in vr-webpack
1 compromised version
- Jun 20, 2022
Malware in hx1-upsrv
1 compromised version
- Jun 20, 2022
Malicious code in test-h1tu98 (npm)
- Jun 20, 2022
Malicious code in super-streams (npm)
- Jun 20, 2022
Malicious code in public-method-library (npm)
- Jun 20, 2022
Malicious code in lollll (npm)
- Jun 20, 2022
Malware in test-h1tu98
1 compromised version
- Jun 20, 2022
Malware in lollll
1 compromised version
- Jun 20, 2022
Malware in super-streams
1 compromised version
- Jun 20, 2022
Malware in public-method-library
1 compromised version
- Jun 20, 2022
Malicious code in winston-pg-native (npm)
- Jun 20, 2022
Malicious code in testpkgabc (npm)
- Jun 20, 2022
Malicious code in test-hitesh (npm)
- Jun 20, 2022
Malicious code in strapi-provider-upload-aws-s3-auth (npm)
- Jun 20, 2022
Malicious code in gfhide (npm)
- Jun 20, 2022
Malware in testpkgabc
1 compromised version
- Jun 20, 2022
Malware in gfhide
1 compromised version
- Jun 20, 2022
Malware in test-hitesh
1 compromised version
- Jun 20, 2022
Malware in winston-pg-native
1 compromised version
- Jun 20, 2022
Malware in strapi-provider-upload-aws-s3-auth
1 compromised version
- Jun 20, 2022
Malicious code in hide0x99 (npm)
- Jun 20, 2022
Malicious code in hide023 (npm)
- Jun 20, 2022
Malicious code in hide-pay (npm)
- Jun 20, 2022
Malware in hide023
1 compromised version
- Jun 20, 2022
Malware in hide-pay
1 compromised version
- Jun 20, 2022
Malware in hide0x99
1 compromised version
- Jun 20, 2022
Malicious code in peoplemath (npm)
- Jun 20, 2022
Malicious code in mimo0 (npm)
- Jun 20, 2022
Malicious code in hide990 (npm)
- Jun 20, 2022
Malicious code in hide330 (npm)
- Jun 20, 2022
Malware in hide330
1 compromised version
- Jun 20, 2022
Malware in hide990
1 compromised version
- Jun 20, 2022
Malware in mimo0
1 compromised version
- Jun 20, 2022
Malware in peoplemath
1 compromised version
- Jun 20, 2022
Malicious code in amiga-services-tools (npm)
- Jun 20, 2022
Malicious code in testsrko (npm)
- Jun 20, 2022
Malicious code in jscs-server (npm)
- Jun 20, 2022
Malicious code in helloworldrk (npm)
- Jun 20, 2022
Malicious code in gestor-leads (npm)
- Jun 20, 2022
Malware in helloworldrk
1 compromised version
- Jun 20, 2022
Malware in amiga-services-tools
1 compromised version
- Jun 20, 2022
Malware in jscs-server
1 compromised version
- Jun 20, 2022
Malware in gestor-leads
1 compromised version
- Jun 20, 2022
Malware in testsrko
1 compromised version
- Jun 20, 2022
Malicious code in amiga-services-cache (npm)
- Jun 20, 2022
Malicious code in amiga-services (npm)
- Jun 20, 2022
Malicious code in dwg-components (npm)
- Jun 20, 2022
Malicious code in dropins_sdk_refactor (npm)
- Jun 20, 2022
Malware in amiga-services-cache
1 compromised version
- Jun 20, 2022
Malware in dropins_sdk_refactor
1 compromised version
Page 6517 of 6,634