Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,681 total in npm · sorted newest first- Jun 20, 2022
Malware in synthetix-debt-pool-adapter
1 compromised version
- Jun 20, 2022
Malicious code in stasis-adapter (npm)
- Jun 20, 2022
Malware in stasis-adapter
1 compromised version
- Jun 20, 2022
Malicious code in sportsdataio-adapter (npm)
- Jun 20, 2022
Malicious code in spectral-macro-score-adapter (npm)
- Jun 20, 2022
Malicious code in solana-view-function-adapter (npm)
- Jun 20, 2022
Malicious code in sochain-adapter (npm)
- Jun 20, 2022
Malware in spectral-macro-score-adapter
1 compromised version
- Jun 20, 2022
Malware in sportsdataio-adapter
1 compromised version
- Jun 20, 2022
Malware in solana-view-function-adapter
1 compromised version
- Jun 20, 2022
Malware in sochain-adapter
1 compromised version
- Jun 20, 2022
Malicious code in snowflake-adapter (npm)
- Jun 20, 2022
Malicious code in satoshitango-adapter (npm)
- Jun 20, 2022
Malicious code in renvm-address-set-adapter (npm)
- Jun 20, 2022
Malicious code in reduce-adapter (npm)
- Jun 20, 2022
Malware in renvm-address-set-adapter
1 compromised version
- Jun 20, 2022
Malware in reduce-adapter
1 compromised version
- Jun 20, 2022
Malware in snowflake-adapter
1 compromised version
- Jun 20, 2022
Malware in satoshitango-adapter
1 compromised version
- Jun 20, 2022
Malicious code in proof-of-reserves-adapter (npm)
- Jun 20, 2022
Malicious code in por-indexer-adapter (npm)
- Jun 20, 2022
Malicious code in polygon-adapter (npm)
- Jun 20, 2022
Malicious code in poa-adapter (npm)
- Jun 20, 2022
Malware in por-indexer-adapter
1 compromised version
- Jun 20, 2022
Malware in proof-of-reserves-adapter
1 compromised version
- Jun 20, 2022
Malware in polygon-adapter
1 compromised version
- Jun 20, 2022
Malware in poa-adapter
1 compromised version
- Jun 20, 2022
Malicious code in paypal-adapter (npm)
- Jun 20, 2022
Malicious code in paxos-adapter (npm)
- Jun 20, 2022
Malicious code in orchid-bandwidth-adapter (npm)
- Jun 20, 2022
Malicious code in openexchangerates-adapter (npm)
- Jun 20, 2022
Malicious code in onchain-gas-adapter (npm)
- Jun 20, 2022
Malware in paypal-adapter
1 compromised version
- Jun 20, 2022
Malware in onchain-gas-adapter
1 compromised version
- Jun 20, 2022
Malware in paxos-adapter
1 compromised version
- Jun 20, 2022
Malware in openexchangerates-adapter
1 compromised version
- Jun 20, 2022
Malware in orchid-bandwidth-adapter
1 compromised version
- Jun 20, 2022
Malicious code in oilpriceapi-adapter (npm)
- Jun 20, 2022
Malicious code in nomics-adapter (npm)
- Jun 20, 2022
Malicious code in nikkei-adapter (npm)
- Jun 20, 2022
Malicious code in ncfx-adapter (npm)
- Jun 20, 2022
Malware in nomics-adapter
1 compromised version
- Jun 20, 2022
Malware in nikkei-adapter
1 compromised version
- Jun 20, 2022
Malware in oilpriceapi-adapter
1 compromised version
- Jun 20, 2022
Malware in ncfx-adapter
1 compromised version
- Jun 20, 2022
Malicious code in mycryptoapi-adapter (npm)
- Jun 20, 2022
Malicious code in mock-ea-adapter (npm)
- Jun 20, 2022
Malicious code in metalsapi-adapter (npm)
- Jun 20, 2022
Malicious code in messari-adapter (npm)
- Jun 20, 2022
Malware in messari-adapter
1 compromised version
Page 6574 of 6,634