Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Jan 21, 2025
Malware in lit-mobx
1 compromised version
- Jan 21, 2025
Malware in aem-spa-component-mapping
1 compromised version
- Jan 21, 2025
Malware in ui-components-shared
1 compromised version
- Jan 21, 2025
Malware in eslint-config-atlassian-fecq
1 compromised version
- Jan 21, 2025
Malware in babel-plugin-i18n-calypso
1 compromised version
- Jan 21, 2025
Malware in calypso-url
1 compromised version
- Jan 21, 2025
Malware in calypso-typescript-config
1 compromised version
- Jan 21, 2025
Malware in aem-spa-page-model-manager
1 compromised version
- Jan 21, 2025
Malicious code in calypso-jest (npm)
6 compromised versions
- Jan 21, 2025
Malicious code in calypso-eslint-overrides (npm)
6 compromised versions
- Jan 21, 2025
Malicious code in calypso-e2e (npm)
6 compromised versions
- Jan 21, 2025
Malicious code in calypso-doctor (npm)
5 compromised versions
- Jan 21, 2025
Malicious code in calypso-config (npm)
6 compromised versions
- Jan 21, 2025
Malicious code in calypso-color-schemes (npm)
6 compromised versions
- Jan 21, 2025
Malicious code in calypso-build (npm)
6 compromised versions
- Jan 21, 2025
Malicious code in aem-react-editable-components (npm)
11 compromised versions
- Jan 21, 2025
Malicious code in aem-angular-editable-components (npm)
13 compromised versions
- Jan 21, 2025
Malware in calypso-color-schemes
1 compromised version
- Jan 21, 2025
Malware in calypso-jest
1 compromised version
- Jan 21, 2025
Malware in calypso-e2e
1 compromised version
- Jan 21, 2025
Malware in calypso-doctor
1 compromised version
- Jan 21, 2025
Malware in aem-angular-editable-components
1 compromised version
- Jan 21, 2025
Malware in calypso-build
1 compromised version
- Jan 21, 2025
Malware in calypso-config
1 compromised version
- Jan 21, 2025
Malware in calypso-eslint-overrides
1 compromised version
- Jan 21, 2025
Malware in aem-react-editable-components
1 compromised version
- Jan 21, 2025
Malicious code in calypso-babel-config (npm)
6 compromised versions
- Jan 21, 2025
Malicious code in calypso-apps-builder (npm)
6 compromised versions
- Jan 21, 2025
Malicious code in calypso-analytics (npm)
6 compromised versions
- Jan 21, 2025
Malware in calypso-apps-builder
1 compromised version
- Jan 21, 2025
Malware in calypso-babel-config
1 compromised version
- Jan 21, 2025
Malware in calypso-analytics
1 compromised version
- Jan 21, 2025
Malware in @sportdigi/scripts
1 compromised version
- Jan 21, 2025
Malicious code in ether-wallet-sdk (npm)
- Jan 21, 2025
Malware in ether-wallet-sdk
1 compromised version
- Jan 21, 2025
Malicious code in ezcolor (npm)
1 compromised version
- Jan 21, 2025
Malware in ezcolor
1 compromised version
- Jan 21, 2025
Malicious code in no3 (npm)
- Jan 21, 2025
Malware in no3
1 compromised version
- Jan 20, 2025
Malicious code in testpacke (npm)
1 compromised version
- Jan 20, 2025
Malicious code in showcase-server (npm)
1 compromised version
- Jan 20, 2025
Malicious code in chipped (npm)
1 compromised version
- Jan 20, 2025
Malicious code in dbprivatekey (npm)
2 compromised versions
- Jan 20, 2025
Malware in dbprivatekey
1 compromised version
- Jan 20, 2025
Malicious code in stormapp (npm)
4 compromised versions
- Jan 20, 2025
Malware in stormapp
1 compromised version
- Jan 20, 2025
Malicious code in prem_.status (npm)
- Jan 20, 2025
Malicious code in prem-video-downloader (npm)
- Jan 20, 2025
Malicious code in prem-tempy (npm)
- Jan 20, 2025
Malicious code in prem-media-downloader (npm)
Page 6454 of 7,308