Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 25, 2025
Malware in nw.gui
1 compromised version
- Mar 25, 2025
Malware in gson-server
1 compromised version
- Mar 25, 2025
Malware in newtheme
1 compromised version
- Mar 25, 2025
Malicious code in vuln-checker-poc (npm)
- Mar 25, 2025
Malicious code in mm-react-gpt (npm)
1 compromised version
- Mar 25, 2025
Malicious code in atlaskit (npm)
1 compromised version
- Mar 25, 2025
Malware in customer-identity-mfe
1 compromised version
- Mar 25, 2025
Malware in vuln-checker-poc
1 compromised version
- Mar 25, 2025
Malware in mm-react-gpt
1 compromised version
- Mar 25, 2025
Malware in customer-identity-mfe-dev
1 compromised version
- Mar 25, 2025
Malware in specialist-pwm
1 compromised version
- Mar 25, 2025
Malware in atlaskit
1 compromised version
- Mar 25, 2025
Malware in cb4good
1 compromised version
- Mar 25, 2025
Malicious code in adjksc (npm)
1 compromised version
- Mar 25, 2025
Malware in adjksc
1 compromised version
- Mar 25, 2025
Malicious code in adhxsc (npm)
- Mar 25, 2025
Malicious code in adhgsc (npm)
1 compromised version
- Mar 25, 2025
Malicious code in adfg-project (npm)
1 compromised version
- Mar 25, 2025
Malware in adhgsc
1 compromised version
- Mar 25, 2025
Malware in adfg-project
1 compromised version
- Mar 25, 2025
Malware in adhxsc
1 compromised version
- Mar 25, 2025
Malicious code in corehome (npm)
1 compromised version
- Mar 25, 2025
Malicious code in wave-charts-sdk (npm)
3 compromised versions
- Mar 25, 2025
Malicious code in sfdc-timeline-chart (npm)
2 compromised versions
- Mar 25, 2025
Malware in sfdc-timeline-chart
1 compromised version
- Mar 25, 2025
Malware in wave-charts-sdk
1 compromised version
- Mar 25, 2025
Malicious code in cdn-icon-fetcher-help (npm)
- Mar 25, 2025
Malicious code in cdn-icon-fetcher (npm)
- Mar 25, 2025
Malicious code in cdn-icon-fetch (npm)
- Mar 25, 2025
Malware in cdn-icon-fetch
1 compromised version
- Mar 25, 2025
Malware in cdn-icon-fetcher-help
1 compromised version
- Mar 25, 2025
Malware in cdn-icon-fetcher
1 compromised version
- Mar 25, 2025
Malicious code in requestz-promises (npm)
- Mar 25, 2025
Malicious code in requests-promises (npm)
4 compromised versions
- Mar 25, 2025
Malware in requestz-promises
1 compromised version
- Mar 25, 2025
Malware in requests-promises
1 compromised version
- Mar 25, 2025
Malicious code in patternfly-4 (npm)
1 compromised version
- Mar 25, 2025
Malware in patternfly-4
1 compromised version
- Mar 25, 2025
Malware in dcnm-core
1 compromised version
- Mar 25, 2025
Malware in patternfly-build
1 compromised version
- Mar 25, 2025
Malicious code in mindbody-payments (npm)
1 compromised version
- Mar 25, 2025
Malware in mindbody-payments
1 compromised version
- Mar 25, 2025
Malware in layouts-lib
1 compromised version
- Mar 25, 2025
Malicious code in wzdui (npm)
15 compromised versions
- Mar 25, 2025
Malicious code in wp-log (npm)
- Mar 25, 2025
Malicious code in vue-official-web (npm)
15 compromised versions
- Mar 25, 2025
Malicious code in sfapm (npm)
30 compromised versions
- Mar 25, 2025
Malicious code in sf-intl-sn-prod (npm)
15 compromised versions
- Mar 25, 2025
Malicious code in magpie-monitor (npm)
- Mar 25, 2025
Malicious code in erp.srm.common (npm)
14 compromised versions
Page 6360 of 7,293