Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,077 total · sorted newest first- May 16, 2022
Malware in @epc-infra/dns-stack
1 compromised version
- May 16, 2022
Malware in @epc-libraries/cdk-custom-resources
1 compromised version
- May 16, 2022
Malware in @epc-infra/region-only-policy
1 compromised version
- May 16, 2022
Malware in @epc-infra/dynamo-stack
1 compromised version
- May 16, 2022
Malware in @epc-infra/stack-config
1 compromised version
- May 16, 2022
Malicious code in @epc-infra/clinstestpackage (npm)
- May 16, 2022
Malicious code in @epc-apps/api-generic-plan (npm)
- May 16, 2022
Malware in @epc-infra/clinstestpackage
1 compromised version
- May 16, 2022
Malware in @epc-apps/api-generic-plan
1 compromised version
- May 16, 2022
Malicious code in @epc-infra/users-stack (npm)
- May 16, 2022
Malicious code in @epc-apps/api-outages (npm)
- May 16, 2022
Malware in @epc-infra/users-stack
1 compromised version
- May 16, 2022
Malware in @epc-apps/api-outages
1 compromised version
- May 16, 2022
Malicious code in @epc-apps/api-ingestor (npm)
- May 16, 2022
Malicious code in @epc-apps/alert-servie (npm)
- May 16, 2022
Malware in @epc-apps/api-ingestor
1 compromised version
- May 16, 2022
Malware in @epc-apps/alert-servie
1 compromised version
- May 16, 2022
Malicious code in colors-update (npm)
- May 16, 2022
Malware in colors-update
1 compromised version
- May 16, 2022
Malicious code in gulp-browserify-thin (npm)
- May 16, 2022
Malicious code in gatsby-plugin-added-by-parent-theme (npm)
- May 16, 2022
Malware in gatsby-plugin-added-by-parent-theme
1 compromised version
- May 16, 2022
Malware in gulp-browserify-thin
1 compromised version
- May 16, 2022
Malicious code in dummy-preprocessor (npm)
- May 16, 2022
Malware in dummy-preprocessor
1 compromised version
- May 16, 2022
Malicious code in angieslist-gulp-build-tasks (npm)
- May 16, 2022
Malicious code in testingx (npm)
- May 16, 2022
Malware in angieslist-gulp-build-tasks
1 compromised version
- May 16, 2022
Malware in testingx
1 compromised version
- May 16, 2022
Malicious code in binance-connector-node (npm)
- May 16, 2022
Malware in binance-connector-node
1 compromised version
- May 16, 2022
Malicious code in adroit-f0-components (npm)
- May 16, 2022
Malicious code in f0-utils (npm)
- May 16, 2022
Malicious code in elysium-ui (npm)
- May 16, 2022
Malware in adroit-f0-components
1 compromised version
- May 16, 2022
Malware in elysium-ui
1 compromised version
- May 16, 2022
Malware in f0-utils
1 compromised version
- May 16, 2022
Malicious code in adroit-websdk-client (npm)
- May 16, 2022
Malicious code in xo-locale (npm)
- May 16, 2022
Malicious code in ual-content-page (npm)
- May 16, 2022
Malicious code in npm_test_nothing (npm)
- May 16, 2022
Malware in ual-content-page
1 compromised version
- May 16, 2022
Malware in npm_test_nothing
1 compromised version
- May 16, 2022
Malware in adroit-websdk-client
1 compromised version
- May 16, 2022
Malware in xo-locale
1 compromised version
- May 16, 2022
Malicious code in com.unity.render-pipelines.high-definition-config (npm)
- May 16, 2022
Malware in com.unity.render-pipelines.high-definition-config
1 compromised version
- May 16, 2022
Malicious code in com.unity.searcher (npm)
- May 16, 2022
Malicious code in com.unity.probuilder (npm)
- May 16, 2022
Malware in com.unity.searcher
1 compromised version
Page 5121 of 5,122