Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,256 total · sorted newest first- May 17, 2022
Malicious code in venzuella333 (npm)
- May 17, 2022
Malware in venzuella333
1 compromised version
- May 17, 2022
Malicious code in dortmond22 (npm)
- May 17, 2022
Malware in dortmond22
1 compromised version
- May 17, 2022
Malicious code in venzuela-oil (npm)
- May 17, 2022
Malware in venzuela-oil
1 compromised version
- May 17, 2022
Malicious code in nodefreaksolivan (npm)
- May 17, 2022
Malware in nodefreaksolivan
1 compromised version
- May 17, 2022
Malicious code in theremontada12 (npm)
- May 17, 2022
Malware in theremontada12
1 compromised version
- May 17, 2022
Malicious code in dontblowthisoff (npm)
- May 17, 2022
Malware in dontblowthisoff
1 compromised version
- May 17, 2022
Malicious code in sameethinghere101 (npm)
- May 17, 2022
Malware in sameethinghere101
1 compromised version
- May 17, 2022
Malicious code in bfx-hf-func-data (npm)
- May 17, 2022
Malware in bfx-hf-func-data
1 compromised version
- May 17, 2022
Malicious code in threatresponse (npm)
- May 17, 2022
Malicious code in testapp00009 (npm)
- May 17, 2022
Malicious code in systemuser (npm)
- May 17, 2022
Malware in threatresponse
1 compromised version
- May 17, 2022
Malware in systemuser
1 compromised version
- May 17, 2022
Malware in testapp00009
1 compromised version
- May 17, 2022
Malicious code in alimaa (npm)
- May 17, 2022
Malicious code in zuanshi (npm)
- May 17, 2022
Malicious code in yadanga (npm)
- May 17, 2022
Malicious code in xiawaa (npm)
- May 17, 2022
Malicious code in wakakaa (npm)
- May 17, 2022
Malware in zuanshi
1 compromised version
- May 17, 2022
Malware in yadanga
1 compromised version
- May 17, 2022
Malware in alimaa
1 compromised version
- May 17, 2022
Malware in xiawaa
1 compromised version
- May 17, 2022
Malware in wakakaa
1 compromised version
- May 17, 2022
Malicious code in @seller-ui/settings (npm)
- May 17, 2022
Malicious code in eslint-plugin-seller-ui-eslint-plugin (npm)
- May 17, 2022
Malware in @seller-ui/settings
1 compromised version
- May 17, 2022
Malware in eslint-plugin-seller-ui-eslint-plugin
1 compromised version
- May 17, 2022
Malicious code in @seller-ui/products (npm)
- May 17, 2022
Malware in @seller-ui/products
1 compromised version
- May 16, 2022
Malicious code in lexical-website-new (npm)
- May 16, 2022
Malicious code in coldstone-sls (npm)
- May 16, 2022
Malicious code in coldstone-helpers (npm)
- May 16, 2022
Malicious code in cap-products (npm)
- May 16, 2022
Malicious code in cap-common-pages (npm)
- May 16, 2022
Malicious code in bolt-styles (npm)
- May 16, 2022
Malicious code in assets-common (npm)
- May 16, 2022
Malware in cap-common-pages
1 compromised version
- May 16, 2022
Malware in bolt-styles
1 compromised version
- May 16, 2022
Malware in coldstone-sls
1 compromised version
- May 16, 2022
Malware in lexical-website-new
1 compromised version
- May 16, 2022
Malware in coldstone-helpers
1 compromised version
Page 5123 of 5,126