Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,681 total in npm · sorted newest first- Jun 20, 2022
Malware in trello-0_10_1
1 compromised version
- Jun 20, 2022
Malicious code in @tsers/react (npm)
- Jun 20, 2022
Malicious code in @crackle-fixtures/single-entry-library (npm)
- Jun 20, 2022
Malicious code in @crackle-fixtures/multi-entry-library (npm)
- Jun 20, 2022
Malicious code in @chargepoint/cp-toolkit (npm)
- Jun 20, 2022
Malware in @tsers/react
1 compromised version
- Jun 20, 2022
Malware in @chargepoint/cp-toolkit
1 compromised version
- Jun 20, 2022
Malware in @crackle-fixtures/multi-entry-library
1 compromised version
- Jun 20, 2022
Malware in @crackle-fixtures/single-entry-library
1 compromised version
- Jun 20, 2022
Malicious code in usage-metrics (npm)
- Jun 20, 2022
Malicious code in @tsers/model (npm)
- Jun 20, 2022
Malicious code in plywood-clickhouse-requester (npm)
- Jun 20, 2022
Malicious code in fortigate-autoscale-core (npm)
- Jun 20, 2022
Malware in @tsers/model
1 compromised version
- Jun 20, 2022
Malware in usage-metrics
1 compromised version
- Jun 20, 2022
Malware in fortigate-autoscale-core
1 compromised version
- Jun 20, 2022
Malware in plywood-clickhouse-requester
1 compromised version
- Jun 20, 2022
Malicious code in sfdc-lightning (npm)
- Jun 20, 2022
Malicious code in sfdc-aem-master (npm)
- Jun 20, 2022
Malicious code in lwc-modules-bar (npm)
- Jun 20, 2022
Malicious code in eslint-config-cq-screens (npm)
- Jun 20, 2022
Malicious code in apl-html (npm)
- Jun 20, 2022
Malware in apl-html
1 compromised version
- Jun 20, 2022
Malware in sfdc-aem-master
1 compromised version
- Jun 20, 2022
Malware in eslint-config-cq-screens
1 compromised version
- Jun 20, 2022
Malware in lwc-modules-bar
1 compromised version
- Jun 20, 2022
Malware in sfdc-lightning
1 compromised version
- Jun 20, 2022
Malicious code in ui-sfdc-javascript-impl (npm)
- Jun 20, 2022
Malicious code in sfdc-stream (npm)
- Jun 20, 2022
Malicious code in sfdc-console (npm)
- Jun 20, 2022
Malware in ui-sfdc-javascript-impl
1 compromised version
- Jun 20, 2022
Malware in sfdc-console
1 compromised version
- Jun 20, 2022
Malware in sfdc-stream
1 compromised version
- Jun 20, 2022
Malicious code in sfdc-title-utils (npm)
- Jun 20, 2022
Malicious code in sfdc-empty-chart (npm)
- Jun 20, 2022
Malicious code in sfdc-abstract-plot (npm)
- Jun 20, 2022
Malicious code in sfdc-abstract-chart (npm)
- Jun 20, 2022
Malware in sfdc-empty-chart
1 compromised version
- Jun 20, 2022
Malware in sfdc-abstract-chart
1 compromised version
- Jun 20, 2022
Malware in sfdc-title-utils
1 compromised version
- Jun 20, 2022
Malware in sfdc-abstract-plot
1 compromised version
- Jun 20, 2022
Malicious code in sfdc-scatter-chart (npm)
- Jun 20, 2022
Malicious code in sfdc-metric-chart (npm)
- Jun 20, 2022
Malicious code in sfdc-bar-chart (npm)
- Jun 20, 2022
Malicious code in sfdc-abstract-cartesian-chart (npm)
- Jun 20, 2022
Malware in sfdc-bar-chart
1 compromised version
- Jun 20, 2022
Malware in sfdc-metric-chart
1 compromised version
- Jun 20, 2022
Malware in sfdc-scatter-chart
1 compromised version
- Jun 20, 2022
Malware in sfdc-abstract-cartesian-chart
1 compromised version
- Jun 20, 2022
Malicious code in sfdc-line-chart (npm)
Page 6552 of 6,634