Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,804 total in npm · sorted newest first- Jun 20, 2022
Malware in communication-short-codes
1 compromised version
- Jun 20, 2022
Malware in communication-identity
1 compromised version
- Jun 20, 2022
Malicious code in core-asynciterator-polyfill (npm)
- Jun 20, 2022
Malicious code in core-amqp (npm)
- Jun 20, 2022
Malicious code in confidential-ledger (npm)
- Jun 20, 2022
Malicious code in communication-sms (npm)
- Jun 20, 2022
Malware in communication-sms
1 compromised version
- Jun 20, 2022
Malware in core-asynciterator-polyfill
1 compromised version
- Jun 20, 2022
Malware in confidential-ledger
1 compromised version
- Jun 20, 2022
Malware in core-amqp
1 compromised version
- Jun 20, 2022
Malicious code in core-http-compat (npm)
- Jun 20, 2022
Malicious code in core-http (npm)
- Jun 20, 2022
Malicious code in core-client-1 (npm)
- Jun 20, 2022
Malicious code in core-auth (npm)
- Jun 20, 2022
Malware in core-auth
1 compromised version
- Jun 20, 2022
Malware in core-client-1
1 compromised version
- Jun 20, 2022
Malware in core-http-compat
1 compromised version
- Jun 20, 2022
Malware in core-http
1 compromised version
- Jun 20, 2022
Malicious code in core-xml (npm)
- Jun 20, 2022
Malicious code in core-tracing (npm)
- Jun 20, 2022
Malicious code in core-rest-pipeline (npm)
- Jun 20, 2022
Malicious code in core-paging (npm)
- Jun 20, 2022
Malware in core-tracing
1 compromised version
- Jun 20, 2022
Malware in core-rest-pipeline
1 compromised version
- Jun 20, 2022
Malware in core-xml
1 compromised version
- Jun 20, 2022
Malware in core-paging
1 compromised version
- Jun 20, 2022
Malicious code in eventhubs-checkpointstore-blob (npm)
- Jun 20, 2022
Malicious code in eslint-plugin-azure-sdk (npm)
- Jun 20, 2022
Malicious code in dtdl-parser (npm)
- Jun 20, 2022
Malicious code in digital-twins-core (npm)
- Jun 20, 2022
Malware in digital-twins-core
1 compromised version
- Jun 20, 2022
Malware in eslint-plugin-azure-sdk
1 compromised version
- Jun 20, 2022
Malware in dtdl-parser
1 compromised version
- Jun 20, 2022
Malware in eventhubs-checkpointstore-blob
1 compromised version
- Jun 20, 2022
Malicious code in identity-vscode (npm)
- Jun 20, 2022
Malicious code in identity-cache-persistence (npm)
- Jun 20, 2022
Malicious code in helloworld123ccwq (npm)
- Jun 20, 2022
Malicious code in eventhubs-checkpointstore-table (npm)
- Jun 20, 2022
Malware in identity-vscode
1 compromised version
- Jun 20, 2022
Malware in identity-cache-persistence
1 compromised version
- Jun 20, 2022
Malware in helloworld123ccwq
1 compromised version
- Jun 20, 2022
Malware in eventhubs-checkpointstore-table
1 compromised version
- Jun 20, 2022
Malicious code in keyvault-admin (npm)
- Jun 20, 2022
Malicious code in iot-modelsrepository (npm)
- Jun 20, 2022
Malicious code in iot-device-update-1 (npm)
- Jun 20, 2022
Malicious code in iot-device-update (npm)
- Jun 20, 2022
Malware in keyvault-admin
1 compromised version
- Jun 20, 2022
Malware in iot-device-update
1 compromised version
- Jun 20, 2022
Malware in iot-device-update-1
1 compromised version
- Jun 20, 2022
Malware in iot-modelsrepository
1 compromised version
Page 6585 of 6,637