Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,681 total in npm · sorted newest first- Jun 20, 2022
Malicious code in upholdsdk (npm)
- Jun 20, 2022
Malicious code in uphold-pat-sample (npm)
- Jun 20, 2022
Malicious code in uphold-pat (npm)
- Jun 20, 2022
Malicious code in keychainswift (npm)
- Jun 20, 2022
Malware in uphold-pat
1 compromised version
- Jun 20, 2022
Malware in uphold-pat-sample
1 compromised version
- Jun 20, 2022
Malware in upholdsdk
1 compromised version
- Jun 20, 2022
Malware in keychainswift
1 compromised version
- Jun 20, 2022
Malicious code in uphold-transaction (npm)
- Jun 20, 2022
Malicious code in uphold-client-credentials-oauth (npm)
- Jun 20, 2022
Malicious code in uphold-authorization-code-oauth (npm)
- Jun 20, 2022
Malicious code in shopify-koa-app (npm)
- Jun 20, 2022
Malware in uphold-transaction
1 compromised version
- Jun 20, 2022
Malware in uphold-client-credentials-oauth
1 compromised version
- Jun 20, 2022
Malware in uphold-authorization-code-oauth
1 compromised version
- Jun 20, 2022
Malware in shopify-koa-app
1 compromised version
- Jun 20, 2022
Malicious code in airpal (npm)
- Jun 20, 2022
Malicious code in stripe-sample-checkout-with-multiple-locales (npm)
- Jun 20, 2022
Malicious code in shopify_supply (npm)
- Jun 20, 2022
Malicious code in scopely-mopub-aacebookaudiencenetwork-adapters (npm)
- Jun 20, 2022
Malware in shopify_supply
1 compromised version
- Jun 20, 2022
Malware in airpal
1 compromised version
- Jun 20, 2022
Malware in scopely-mopub-aacebookaudiencenetwork-adapters
1 compromised version
- Jun 20, 2022
Malware in stripe-sample-checkout-with-multiple-locales
1 compromised version
- Jun 20, 2022
Malicious code in affirmdev1 (npm)
- Jun 20, 2022
Malicious code in helium-pgbouncer (npm)
- Jun 20, 2022
Malicious code in helium-helios (npm)
- Jun 20, 2022
Malicious code in helium-constructor (npm)
- Jun 20, 2022
Malware in helium-helios
1 compromised version
- Jun 20, 2022
Malware in affirmdev1
1 compromised version
- Jun 20, 2022
Malware in helium-pgbouncer
1 compromised version
- Jun 20, 2022
Malware in helium-constructor
1 compromised version
- Jun 20, 2022
Malicious code in affirmdev (npm)
- Jun 20, 2022
Malicious code in paywithaffirmtheme (npm)
- Jun 20, 2022
Malicious code in magic.github.io (npm)
- Jun 20, 2022
Malicious code in elasticagent-linux-arm (npm)
- Jun 20, 2022
Malicious code in elasticagent (npm)
- Jun 20, 2022
Malware in elasticagent
1 compromised version
- Jun 20, 2022
Malware in affirmdev
1 compromised version
- Jun 20, 2022
Malware in magic.github.io
1 compromised version
- Jun 20, 2022
Malware in paywithaffirmtheme
1 compromised version
- Jun 20, 2022
Malware in elasticagent-linux-arm
1 compromised version
- Jun 20, 2022
Malicious code in ali-react-table-monorepo (npm)
- Jun 20, 2022
Malicious code in elasticsearch-logstashforwarder (npm)
- Jun 20, 2022
Malicious code in elasticsearch-logstash_reporter (npm)
- Jun 20, 2022
Malicious code in elasticagent-windows-arm (npm)
- Jun 20, 2022
Malware in elasticagent-windows-arm
1 compromised version
- Jun 20, 2022
Malware in ali-react-table-monorepo
1 compromised version
- Jun 20, 2022
Malware in elasticsearch-logstashforwarder
1 compromised version
- Jun 20, 2022
Malware in elasticsearch-logstash_reporter
1 compromised version
Page 6522 of 6,634