Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,681 total in npm · sorted newest first- Jun 20, 2022
Malicious code in sfdc-gauge-chart (npm)
- Jun 20, 2022
Malicious code in sfdc-funnel-chart (npm)
- Jun 20, 2022
Malicious code in sfdc-combo-chart (npm)
- Jun 20, 2022
Malware in sfdc-funnel-chart
1 compromised version
- Jun 20, 2022
Malware in sfdc-line-chart
1 compromised version
- Jun 20, 2022
Malware in sfdc-gauge-chart
1 compromised version
- Jun 20, 2022
Malware in sfdc-combo-chart
1 compromised version
- Jun 20, 2022
Malicious code in sfdc-title-util (npm)
- Jun 20, 2022
Malicious code in react-dnd-examples-hooks (npm)
- Jun 20, 2022
Malicious code in react-dnd-examples-decorators (npm)
- Jun 20, 2022
Malicious code in com.unity.git (npm)
- Jun 20, 2022
Malware in sfdc-title-util
1 compromised version
- Jun 20, 2022
Malware in com.unity.git
1 compromised version
- Jun 20, 2022
Malware in react-dnd-examples-hooks
1 compromised version
- Jun 20, 2022
Malware in react-dnd-examples-decorators
1 compromised version
- Jun 20, 2022
Malicious code in registrydependency1 (npm)
- Jun 20, 2022
Malicious code in com.unity.git.ui.tests (npm)
- Jun 20, 2022
Malicious code in com.unity.git.ui (npm)
- Jun 20, 2022
Malicious code in com.unity.git.api (npm)
- Jun 20, 2022
Malware in com.unity.git.api
1 compromised version
- Jun 20, 2022
Malware in registrydependency1
1 compromised version
- Jun 20, 2022
Malware in com.unity.git.ui.tests
1 compromised version
- Jun 20, 2022
Malware in com.unity.git.ui
1 compromised version
- Jun 20, 2022
Malicious code in registrydependency2 (npm)
- Jun 20, 2022
Malicious code in free-fortnite-skins-genrator-en5 (npm)
- Jun 20, 2022
Malicious code in free-fortnite-skins-genrator-en4 (npm)
- Jun 20, 2022
Malware in free-fortnite-skins-genrator-en5
1 compromised version
- Jun 20, 2022
Malware in free-fortnite-skins-genrator-en4
1 compromised version
- Jun 20, 2022
Malware in registrydependency2
1 compromised version
- Jun 20, 2022
Malicious code in free-fortnite-skins-genrator-pjb (npm)
- Jun 20, 2022
Malicious code in free-fortnite-skins-genrator-inds (npm)
- Jun 20, 2022
Malicious code in free-fortnite-skins-genrator-en3 (npm)
- Jun 20, 2022
Malicious code in free-fortnite-skins-genrator-en2 (npm)
- Jun 20, 2022
Malicious code in free-fortnite-skins-genrator-en1 (npm)
- Jun 20, 2022
Malware in free-fortnite-skins-genrator-en2
1 compromised version
- Jun 20, 2022
Malware in free-fortnite-skins-genrator-inds
1 compromised version
- Jun 20, 2022
Malware in free-fortnite-skins-genrator-en1
1 compromised version
- Jun 20, 2022
Malware in free-fortnite-skins-genrator-en3
1 compromised version
- Jun 20, 2022
Malware in free-fortnite-skins-genrator-pjb
1 compromised version
- Jun 20, 2022
Malicious code in free-fortnite-skins-genrator-iospc (npm)
- Jun 20, 2022
Malicious code in free-fortnite-skins-genrator-app (npm)
- Jun 20, 2022
Malicious code in free-fortnite-skins-genrator-apk (npm)
- Jun 20, 2022
Malware in free-fortnite-skins-genrator-app
1 compromised version
- Jun 20, 2022
Malware in free-fortnite-skins-genrator-apk
1 compromised version
- Jun 20, 2022
Malware in free-fortnite-skins-genrator-iospc
1 compromised version
- Jun 20, 2022
Malicious code in get-free-fortnite-skin-usa (npm)
- Jun 20, 2022
Malicious code in free-fortnite-skin-ineoi (npm)
- Jun 20, 2022
Malicious code in free-fortnite-skin-indie (npm)
- Jun 20, 2022
Malicious code in free-fortnite-skin-epmn1 (npm)
- Jun 20, 2022
Malware in free-fortnite-skin-epmn1
1 compromised version
Page 6553 of 6,634