Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Feb 3, 2025
Malware in cscropper-vue3
1 compromised version
- Feb 3, 2025
Malware in cs-count
1 compromised version
- Feb 3, 2025
Malware in cs-templates
1 compromised version
- Feb 3, 2025
Malware in cs-magnifier
1 compromised version
- Feb 3, 2025
Malware in cscvue-unplugin
1 compromised version
- Feb 3, 2025
Malware in achalk-next
1 compromised version
- Feb 3, 2025
Malware in csbchalk-next
1 compromised version
- Feb 3, 2025
Malware in csquill-vue3
1 compromised version
- Feb 3, 2025
Malware in cscchokidar-next
1 compromised version
- Feb 3, 2025
Malware in cschalk-next
1 compromised version
- Feb 3, 2025
Malware in cs-croppers
1 compromised version
- Feb 3, 2025
Malware in cschalk
1 compromised version
- Feb 3, 2025
Malware in cschokidar-next
1 compromised version
- Feb 3, 2025
Malware in vue-plugin-rely-cs
1 compromised version
- Feb 3, 2025
Malware in cscount-vue3
1 compromised version
- Feb 3, 2025
Malware in csvue-unplugin
1 compromised version
- Feb 3, 2025
Malware in cscchalk
1 compromised version
- Feb 3, 2025
Malware in cs-quill
1 compromised version
- Feb 3, 2025
Malware in achokidar-next
1 compromised version
- Feb 3, 2025
Malware in csbvue-unplugin
1 compromised version
- Feb 3, 2025
Malicious code in vue-plugin-relyc (npm)
- Feb 3, 2025
Malicious code in cs-templates-vue3 (npm)
- Feb 3, 2025
Malicious code in cs-icons (npm)
- Feb 3, 2025
Malware in cs-icons
1 compromised version
- Feb 3, 2025
Malware in vue-plugin-relyc
1 compromised version
- Feb 3, 2025
Malware in cs-templates-vue3
1 compromised version
- Feb 3, 2025
Malicious code in discordjs-webclients (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in discordjs-self-v22.3 (npm)
1 compromised version
- Feb 3, 2025
Malware in discordjs-self-v22.3
1 compromised version
- Feb 3, 2025
Malware in discordjs-webclients
1 compromised version
- Feb 3, 2025
Malicious code in ethchained (npm)
- Feb 3, 2025
Malware in ethchained
1 compromised version
- Feb 3, 2025
Malware in ethweb-set
1 compromised version
- Feb 3, 2025
Malware in fast-utilz
1 compromised version
- Feb 3, 2025
Malicious code in legacy_fbid (npm)
1 compromised version
- Feb 3, 2025
Malicious code in experimenter-docs (npm)
1 compromised version
- Feb 3, 2025
Malware in legacy_fbid
1 compromised version
- Feb 3, 2025
Malware in forcechatter
1 compromised version
- Feb 3, 2025
Malware in semantic-release-dependencies
1 compromised version
- Feb 3, 2025
Malware in experimenter-docs
1 compromised version
- Feb 3, 2025
Malware in swisscom-scaleio
1 compromised version
- Feb 3, 2025
Malware in create-shopify-web-app
1 compromised version
- Feb 3, 2025
Malware in 4m-clean-shopify-app
1 compromised version
- Feb 3, 2025
Malicious code in socketdinacom (npm)
- Feb 3, 2025
Malicious code in setan (npm)
- Feb 3, 2025
Malicious code in hantu (npm)
- Feb 3, 2025
Malicious code in dinacomgraph (npm)
- Feb 3, 2025
Malware in socketdinacom
1 compromised version
- Feb 3, 2025
Malware in setan
1 compromised version
- Feb 3, 2025
Malware in hantu
1 compromised version
Page 6440 of 7,308