Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,681 total in npm · sorted newest first- Jun 20, 2022
Malware in amiga-services
1 compromised version
- Jun 20, 2022
Malware in dwg-components
1 compromised version
- Jun 20, 2022
Malicious code in prod_assets_web_modules (npm)
- Jun 20, 2022
Malicious code in patientenapp (npm)
- Jun 20, 2022
Malicious code in jessa-vue-components (npm)
- Jun 20, 2022
Malicious code in cobrowse-common (npm)
- Jun 20, 2022
Malware in patientenapp
1 compromised version
- Jun 20, 2022
Malware in cobrowse-common
1 compromised version
- Jun 20, 2022
Malware in jessa-vue-components
1 compromised version
- Jun 20, 2022
Malware in prod_assets_web_modules
1 compromised version
- Jun 20, 2022
Malicious code in your-module-name (npm)
- Jun 20, 2022
Malicious code in rnx-kit-scripts (npm)
- Jun 20, 2022
Malicious code in @pornhub/alerts (npm)
- Jun 20, 2022
Malicious code in noblox.js-beta (npm)
- Jun 20, 2022
Malware in your-module-name
1 compromised version
- Jun 20, 2022
Malware in noblox.js-beta
1 compromised version
- Jun 20, 2022
Malware in rnx-kit-scripts
1 compromised version
- Jun 20, 2022
Malware in @pornhub/alerts
1 compromised version
- Jun 20, 2022
Malicious code in @xvideos/api (npm)
- Jun 20, 2022
Malicious code in @xvideos/anonymizer (npm)
- Jun 20, 2022
Malicious code in @xvideos/analytics (npm)
- Jun 20, 2022
Malicious code in @xvideos/alerts (npm)
- Jun 20, 2022
Malware in @xvideos/anonymizer
1 compromised version
- Jun 20, 2022
Malware in @xvideos/api
1 compromised version
- Jun 20, 2022
Malware in @xvideos/analytics
1 compromised version
- Jun 20, 2022
Malware in @xvideos/alerts
1 compromised version
- Jun 20, 2022
Malicious code in @xvideos/auth-server (npm)
- Jun 20, 2022
Malicious code in @xvideos/auth (npm)
- Jun 20, 2022
Malicious code in @xvideos/apps (npm)
- Jun 20, 2022
Malicious code in @xvideos/app-config (npm)
- Jun 20, 2022
Malicious code in @xvideos/app (npm)
- Jun 20, 2022
Malware in @xvideos/app-config
1 compromised version
- Jun 20, 2022
Malware in @xvideos/auth
1 compromised version
- Jun 20, 2022
Malware in @xvideos/app
1 compromised version
- Jun 20, 2022
Malware in @xvideos/apps
1 compromised version
- Jun 20, 2022
Malware in @xvideos/auth-server
1 compromised version
- Jun 20, 2022
Malicious code in @xvideos/base (npm)
- Jun 20, 2022
Malicious code in @xvideos/backend (npm)
- Jun 20, 2022
Malicious code in @xvideos/azure (npm)
- Jun 20, 2022
Malicious code in @xvideos/aws (npm)
- Jun 20, 2022
Malware in @xvideos/azure
1 compromised version
- Jun 20, 2022
Malware in @xvideos/base
1 compromised version
- Jun 20, 2022
Malware in @xvideos/aws
1 compromised version
- Jun 20, 2022
Malware in @xvideos/backend
1 compromised version
- Jun 20, 2022
Malicious code in @xvideos/client-api (npm)
- Jun 20, 2022
Malicious code in @xvideos/client (npm)
- Jun 20, 2022
Malicious code in @xvideos/builder (npm)
- Jun 20, 2022
Malicious code in @xvideos/build (npm)
- Jun 20, 2022
Malware in @xvideos/client-api
1 compromised version
- Jun 20, 2022
Malware in @xvideos/client
1 compromised version
Page 6518 of 6,634