Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,681 total in npm · sorted newest first- Jun 20, 2022
Malicious code in perf-ai-metrics-advisor (npm)
- Jun 20, 2022
Malicious code in azure-quantum-jobs (npm)
- Jun 20, 2022
Malware in perf-ai-metrics-advisor
1 compromised version
- Jun 20, 2022
Malware in azure-quantum-jobs
1 compromised version
- Jun 20, 2022
Malware in perf-event-hubs
1 compromised version
- Jun 20, 2022
Malware in perf-search-documents
1 compromised version
- Jun 20, 2022
Malicious code in perf-storage-file-share-track-1 (npm)
- Jun 20, 2022
Malicious code in perf-storage-blob-track-1 (npm)
- Jun 20, 2022
Malicious code in perf-event-hubs-track-1 (npm)
- Jun 20, 2022
Malware in perf-storage-file-share-track-1
1 compromised version
- Jun 20, 2022
Malware in perf-storage-blob-track-1
1 compromised version
- Jun 20, 2022
Malware in perf-event-hubs-track-1
1 compromised version
- Jun 20, 2022
Malicious code in perf-storage-file-share (npm)
- Jun 20, 2022
Malicious code in perf-storage-file-datalake (npm)
- Jun 20, 2022
Malicious code in perf-storage-blob (npm)
- Jun 20, 2022
Malicious code in perf-monitor-query (npm)
- Jun 20, 2022
Malware in perf-storage-blob
1 compromised version
- Jun 20, 2022
Malware in perf-monitor-query
1 compromised version
- Jun 20, 2022
Malware in perf-storage-file-share
1 compromised version
- Jun 20, 2022
Malware in perf-storage-file-datalake
1 compromised version
- Jun 20, 2022
Malicious code in ai-text-analytics (npm)
- Jun 20, 2022
Malicious code in ai-form-recognizer (npm)
- Jun 20, 2022
Malicious code in keyvault-secrets (npm)
- Jun 20, 2022
Malicious code in keyvault-certificates (npm)
- Jun 20, 2022
Malware in keyvault-certificates
1 compromised version
- Jun 20, 2022
Malware in keyvault-secrets
1 compromised version
- Jun 20, 2022
Malware in ai-text-analytics
1 compromised version
- Jun 20, 2022
Malware in ai-form-recognizer
1 compromised version
- Jun 20, 2022
Malicious code in ai-metrics-advisor (npm)
- Jun 20, 2022
Malicious code in service-bus-track-1 (npm)
- Jun 20, 2022
Malicious code in eventgrid (npm)
- Jun 20, 2022
Malicious code in container-registry (npm)
- Jun 20, 2022
Malware in eventgrid
1 compromised version
- Jun 20, 2022
Malware in ai-metrics-advisor
1 compromised version
- Jun 20, 2022
Malware in container-registry
1 compromised version
- Jun 20, 2022
Malware in service-bus-track-1
1 compromised version
- Jun 20, 2022
Malicious code in storage-file-share-track-1 (npm)
- Jun 20, 2022
Malicious code in storage-blob-track-1 (npm)
- Jun 20, 2022
Malicious code in search-documents (npm)
- Jun 20, 2022
Malicious code in event-hubs-track-1 (npm)
- Jun 20, 2022
Malicious code in event-hubs (npm)
- Jun 20, 2022
Malware in storage-blob-track-1
1 compromised version
- Jun 20, 2022
Malware in storage-file-share-track-1
1 compromised version
- Jun 20, 2022
Malware in event-hubs
1 compromised version
- Jun 20, 2022
Malware in search-documents
1 compromised version
- Jun 20, 2022
Malware in event-hubs-track-1
1 compromised version
- Jun 20, 2022
Malicious code in web-workers-js (npm)
- Jun 20, 2022
Malicious code in storage-file-datalake (npm)
- Jun 20, 2022
Malicious code in monitor-query (npm)
- Jun 20, 2022
Malware in storage-file-datalake
1 compromised version
Page 6536 of 6,634