Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Jan 24, 2025
Malicious code in amazon-db (npm)
1 compromised version
- Jan 24, 2025
Malicious code in amazon-analytics (npm)
1 compromised version
- Jan 24, 2025
Malicious code in amazon-cache (npm)
1 compromised version
- Jan 24, 2025
Malicious code in amazon-connect (npm)
1 compromised version
- Jan 24, 2025
Malicious code in apple-checkout (npm)
1 compromised version
- Jan 24, 2025
Malicious code in amazon-database (npm)
1 compromised version
- Jan 24, 2025
Malicious code in amazon-event (npm)
1 compromised version
- Jan 24, 2025
Malicious code in amazon-gateway (npm)
1 compromised version
- Jan 24, 2025
Malicious code in amazon-payment (npm)
1 compromised version
- Jan 24, 2025
Malicious code in amazon-internal (npm)
1 compromised version
- Jan 24, 2025
Malicious code in amazon-model (npm)
1 compromised version
- Jan 24, 2025
Malicious code in amazon-logger (npm)
1 compromised version
- Jan 24, 2025
Malicious code in amazon-sdk (npm)
1 compromised version
- Jan 24, 2025
Malicious code in amazon-service (npm)
1 compromised version
- Jan 23, 2025
Malicious code in airbnb-admin (npm)
1 compromised version
- Jan 23, 2025
Malicious code in airbnb-api-client (npm)
1 compromised version
- Jan 23, 2025
Malicious code in airbnb-cache (npm)
1 compromised version
- Jan 23, 2025
Malicious code in airbnb-auth (npm)
1 compromised version
- Jan 23, 2025
Malicious code in airbnb-analytics (npm)
1 compromised version
- Jan 23, 2025
Malicious code in collapsible-group (npm)
1 compromised version
- Jan 23, 2025
Malicious code in ebay-testerx (npm)
1 compromised version
- Jan 23, 2025
Malicious code in no-style-dependency (npm)
1 compromised version
- Jan 23, 2025
Malicious code in ebay-tester (npm)
1 compromised version
- Jan 23, 2025
Malware in arcus-cmd-utils
1 compromised version
- Jan 23, 2025
Malicious code in webpathaxios (npm)
- Jan 23, 2025
Malware in webpathaxios
1 compromised version
- Jan 23, 2025
Malware in snapon-imageviewer
1 compromised version
- Jan 23, 2025
Malware in snapon-imageviewer-lw
1 compromised version
- Jan 23, 2025
Malicious code in testidneel-test-package (npm)
12 compromised versions
- Jan 23, 2025
Malicious code in equipment-icon-mapper (npm)
2 compromised versions
- Jan 23, 2025
Malware in equipment-icon-mapper
1 compromised version
- Jan 23, 2025
Malware in testidneel-test-package
1 compromised version
- Jan 23, 2025
Malicious code in testyyz (npm)
1 compromised version
- Jan 23, 2025
Malware in testyyz
1 compromised version
- Jan 23, 2025
Malware in canva-connect-api-starter-kit
1 compromised version
- Jan 23, 2025
Malware in bigcommerce-cornerstone
1 compromised version
- Jan 23, 2025
Malware in parseq-tracevis
1 compromised version
- Jan 23, 2025
Malware in grafana-sentry-datasource
1 compromised version
- Jan 23, 2025
Malware in spectro-cloud-docs
1 compromised version
- Jan 23, 2025
Malware in lana-docs-site
1 compromised version
- Jan 23, 2025
Malicious code in node-server-sdk (npm)
1 compromised version
- Jan 23, 2025
Malware in parliament-ui-components
1 compromised version
- Jan 23, 2025
Malware in solidity-ibc
1 compromised version
- Jan 23, 2025
Malware in old-mpl-token-metadata
1 compromised version
- Jan 23, 2025
Malware in node-server-sdk
1 compromised version
- Jan 23, 2025
Malware in appboy-web-sdk-v2
1 compromised version
- Jan 23, 2025
Malware in old-celo-identity
1 compromised version
- Jan 23, 2025
Malicious code in solc-0.6.8 (npm)
1 compromised version
- Jan 23, 2025
Malware in layerzero-v2
1 compromised version
- Jan 23, 2025
Malware in phonepe-payment-capacitor
1 compromised version
Page 6450 of 7,308