Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Feb 3, 2025
Malicious code in tssinternaldev (npm)
2 compromised versions
- Feb 3, 2025
Malware in tssinternaldev
1 compromised version
- Feb 3, 2025
Malicious code in dvpawebwidgetsdetailspageclient (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in update_image_asset (npm)
1 compromised version
- Feb 3, 2025
Malicious code in packeage (npm)
1 compromised version
- Feb 3, 2025
Malicious code in combine_assets_store (npm)
1 compromised version
- Feb 3, 2025
Malicious code in com.liferay.wiki.web (npm)
1 compromised version
- Feb 3, 2025
Malware in scuntest
1 compromised version
- Feb 3, 2025
Malware in combine_assets_store
1 compromised version
- Feb 3, 2025
Malware in react-native-country-picker-modal-modified
1 compromised version
- Feb 3, 2025
Malware in testpacke
1 compromised version
- Feb 3, 2025
Malware in elabasia-mobileapp-react-native-ui
1 compromised version
- Feb 3, 2025
Malware in update_image_asset
1 compromised version
- Feb 3, 2025
Malware in com.liferay.wiki.web
1 compromised version
- Feb 3, 2025
Malware in classic-theme
1 compromised version
- Feb 3, 2025
Malware in packeage
1 compromised version
- Feb 3, 2025
Malware in dvpawebwidgetsdetailspageclient
1 compromised version
- Feb 3, 2025
Malicious code in vue-plugin-rely-cs (npm)
- Feb 3, 2025
Malicious code in csvue-unplugin (npm)
- Feb 3, 2025
Malicious code in csquill-vue3 (npm)
- Feb 3, 2025
Malicious code in csmagnifier-vue3 (npm)
- Feb 3, 2025
Malicious code in cscvue-unplugin (npm)
- Feb 3, 2025
Malicious code in cscropper-vue32 (npm)
- Feb 3, 2025
Malicious code in cscropper-vue3 (npm)
- Feb 3, 2025
Malicious code in cscount-vue3 (npm)
- Feb 3, 2025
Malicious code in cschokidar-next (npm)
- Feb 3, 2025
Malicious code in cscchalk (npm)
- Feb 3, 2025
Malicious code in csbvue-unplugin (npm)
- Feb 3, 2025
Malicious code in csachalk-next (npm)
- Feb 3, 2025
Malicious code in cs-templates (npm)
- Feb 3, 2025
Malicious code in cs-quill (npm)
- Feb 3, 2025
Malicious code in cs-player (npm)
- Feb 3, 2025
Malicious code in cs-magnifier (npm)
- Feb 3, 2025
Malicious code in cs-icons-vue3 (npm)
- Feb 3, 2025
Malicious code in cs-croppers (npm)
- Feb 3, 2025
Malicious code in cs-count (npm)
- Feb 3, 2025
Malicious code in cs-contextmenu (npm)
- Feb 3, 2025
Malicious code in achokidar-next (npm)
- Feb 3, 2025
Malware in cs-contextmenu
1 compromised version
- Feb 3, 2025
Malware in csachalk-next
1 compromised version
- Feb 3, 2025
Malware in cs-player
1 compromised version
- Feb 3, 2025
Malware in cscropper-vue32
1 compromised version
- Feb 3, 2025
Malware in csmagnifier-vue3
1 compromised version
- Feb 3, 2025
Malware in cs-icons-vue3
1 compromised version
- Feb 3, 2025
Malware in cscropper-vue3
1 compromised version
- Feb 3, 2025
Malware in cs-count
1 compromised version
- Feb 3, 2025
Malware in cs-templates
1 compromised version
- Feb 3, 2025
Malware in cs-magnifier
1 compromised version
- Feb 3, 2025
Malware in cscvue-unplugin
1 compromised version
- Feb 3, 2025
Malware in achalk-next
1 compromised version
Page 6424 of 7,293