Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,681 total in npm · sorted newest first- Jun 20, 2022
Malware in mycryptoapi-adapter
1 compromised version
- Jun 20, 2022
Malware in metalsapi-adapter
1 compromised version
- Jun 20, 2022
Malware in mock-ea-adapter
1 compromised version
- Jun 20, 2022
Malicious code in marketstack-adapter (npm)
- Jun 20, 2022
Malicious code in lotus-adapter (npm)
- Jun 20, 2022
Malicious code in lition-adapter (npm)
- Jun 20, 2022
Malicious code in linkpool-adapter (npm)
- Jun 20, 2022
Malware in lition-adapter
1 compromised version
- Jun 20, 2022
Malware in linkpool-adapter
1 compromised version
- Jun 20, 2022
Malware in marketstack-adapter
1 compromised version
- Jun 20, 2022
Malware in lotus-adapter
1 compromised version
- Jun 20, 2022
Malicious code in lcx-adapter (npm)
- Jun 20, 2022
Malicious code in layer2-sequencer-health-adapter (npm)
- Jun 20, 2022
Malicious code in kaiko-adapter (npm)
- Jun 20, 2022
Malware in layer2-sequencer-health-adapter
1 compromised version
- Jun 20, 2022
Malware in lcx-adapter
1 compromised version
- Jun 20, 2022
Malware in kaiko-adapter
1 compromised version
- Jun 20, 2022
Malicious code in json-rpc-adapter (npm)
- Jun 20, 2022
Malicious code in jpegd-adapter (npm)
- Jun 20, 2022
Malicious code in ipfs-adapter (npm)
- Jun 20, 2022
Malicious code in intrinio-adapter (npm)
- Jun 20, 2022
Malware in jpegd-adapter
1 compromised version
- Jun 20, 2022
Malware in intrinio-adapter
1 compromised version
- Jun 20, 2022
Malware in json-rpc-adapter
1 compromised version
- Jun 20, 2022
Malware in ipfs-adapter
1 compromised version
- Jun 20, 2022
Malicious code in iex-cloud-adapter (npm)
- Jun 20, 2022
Malicious code in gramchain-adapter (npm)
- Jun 20, 2022
Malicious code in google-bigquery-adapter (npm)
- Jun 20, 2022
Malicious code in geodb-adapter (npm)
- Jun 20, 2022
Malware in geodb-adapter
1 compromised version
- Jun 20, 2022
Malware in gramchain-adapter
1 compromised version
- Jun 20, 2022
Malware in iex-cloud-adapter
1 compromised version
- Jun 20, 2022
Malware in google-bigquery-adapter
1 compromised version
- Jun 20, 2022
Malicious code in genesis-volatility-adapter (npm)
- Jun 20, 2022
Malicious code in gemini-adapter (npm)
- Jun 20, 2022
Malicious code in gauntlet-terra (npm)
- Jun 20, 2022
Malicious code in gauntlet-solana-contracts (npm)
- Jun 20, 2022
Malware in gauntlet-terra
1 compromised version
- Jun 20, 2022
Malware in genesis-volatility-adapter
1 compromised version
- Jun 20, 2022
Malware in gemini-adapter
1 compromised version
- Jun 20, 2022
Malware in gauntlet-solana-contracts
1 compromised version
- Jun 20, 2022
Malicious code in gauntlet-solana (npm)
- Jun 20, 2022
Malicious code in gauntlet-core (npm)
- Jun 20, 2022
Malicious code in fmpcloud-adapter (npm)
- Jun 20, 2022
Malicious code in flightaware-adapter (npm)
- Jun 20, 2022
Malicious code in fixer-adapter (npm)
- Jun 20, 2022
Malware in flightaware-adapter
1 compromised version
- Jun 20, 2022
Malware in fmpcloud-adapter
1 compromised version
- Jun 20, 2022
Malware in fixer-adapter
1 compromised version
- Jun 20, 2022
Malware in gauntlet-core
1 compromised version
Page 6575 of 6,634