Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Jan 23, 2025
Malware in api-demo-sample-lib1
1 compromised version
- Jan 23, 2025
Malware in express-v4
1 compromised version
- Jan 23, 2025
Malware in solc-0.6.8
1 compromised version
- Jan 23, 2025
Malware in eslint-config-proton-lint
1 compromised version
- Jan 23, 2025
Malicious code in self-bots-dc (npm)
3 compromised versions
- Jan 23, 2025
Malware in self-bots-dc
1 compromised version
- Jan 23, 2025
Malware in romanes-eunt-domus-jd-1337
1 compromised version
- Jan 23, 2025
Malicious code in @chkpkit/box (npm)
3 compromised versions
- Jan 23, 2025
Malicious code in chkpkit (npm)
4 compromised versions
- Jan 23, 2025
Malicious code in dell.github.io (npm)
1 compromised version
- Jan 22, 2025
Malicious code in bigcommerce.github.io (npm)
1 compromised version
- Jan 22, 2025
Malicious code in wallet-history-demo-backend (npm)
1 compromised version
- Jan 22, 2025
Malicious code in fix-this (npm)
- Jan 22, 2025
Malware in fix-this
1 compromised version
- Jan 22, 2025
Malicious code in another-depconf-poc (npm)
- Jan 22, 2025
Malware in another-depconf-poc
1 compromised version
- Jan 22, 2025
Malicious code in groots645-npm-package (npm)
10 compromised versions
- Jan 22, 2025
Malware in groots645-npm-package
1 compromised version
- Jan 22, 2025
Malicious code in qa-octuple (npm)
1 compromised version
- Jan 22, 2025
Malicious code in octuple (npm)
1 compromised version
- Jan 22, 2025
Malware in octuple
1 compromised version
- Jan 22, 2025
Malware in qa-octuple
1 compromised version
- Jan 22, 2025
Malicious code in telegramclients (npm)
5 compromised versions
- Jan 22, 2025
Malware in telegramclients
1 compromised version
- Jan 22, 2025
Malicious code in text-unicode-webpack (npm)
1 compromised version
- Jan 22, 2025
Malicious code in packs-starter (npm)
1 compromised version
- Jan 22, 2025
Malicious code in op-vscode (npm)
2 compromised versions
- Jan 22, 2025
Malicious code in legacy_vis_analyzer (npm)
1 compromised version
- Jan 22, 2025
Malicious code in gnosis-twitter-bot (npm)
1 compromised version
- Jan 22, 2025
Malicious code in dynatrace_config_manager (npm)
1 compromised version
- Jan 22, 2025
Malicious code in angular-blockchain-wallet (npm)
1 compromised version
- Jan 22, 2025
Malicious code in ai-plugin-template (npm)
1 compromised version
- Jan 22, 2025
Malicious code in adblock-resources (npm)
1 compromised version
- Jan 22, 2025
Malicious code in 1password-sdk-exapmles (npm)
1 compromised version
- Jan 22, 2025
Malware in gatsby-hampton-theme
1 compromised version
- Jan 22, 2025
Malware in vscode-gestalt
1 compromised version
- Jan 22, 2025
Malware in build-stuff
1 compromised version
- Jan 22, 2025
Malware in gnosis-twitter-bot
1 compromised version
- Jan 22, 2025
Malware in op-vscode
1 compromised version
- Jan 22, 2025
Malware in lambda-sns-dynatrace-sdk
1 compromised version
- Jan 22, 2025
Malware in text-unicode-webpack
1 compromised version
- Jan 22, 2025
Malware in dynatrace_config_manager
1 compromised version
- Jan 22, 2025
Malware in alchemy-web3-webpack-example
1 compromised version
- Jan 22, 2025
Malware in cyclotron-svc
1 compromised version
- Jan 22, 2025
Malware in packs-starter
1 compromised version
- Jan 22, 2025
Malware in legacy_vis_analyzer
1 compromised version
- Jan 22, 2025
Malware in angular-blockchain-wallet
1 compromised version
- Jan 22, 2025
Malware in adblock-resources
1 compromised version
- Jan 22, 2025
Malware in 1password-sdk-exapmles
1 compromised version
- Jan 22, 2025
Malware in ai-plugin-template
1 compromised version
Page 6451 of 7,308