Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Jan 20, 2025
Malicious code in prem-instagram (npm)
- Jan 20, 2025
Malicious code in prem-ig-downloader (npm)
- Jan 20, 2025
Malicious code in prem-fb-downloader (npm)
- Jan 20, 2025
Malicious code in prem-facebook (npm)
- Jan 20, 2025
Malicious code in prem-downloader (npm)
- Jan 20, 2025
Malicious code in prem-bot-convo (npm)
- Jan 20, 2025
Malicious code in prem-babu-media (npm)
- Jan 20, 2025
Malicious code in prem-babu-fca (npm)
- Jan 20, 2025
Malicious code in prem-babu-api (npm)
- Jan 20, 2025
Malware in prem-facebook
1 compromised version
- Jan 20, 2025
Malware in prem-instagram
1 compromised version
- Jan 20, 2025
Malware in prem_.status
1 compromised version
- Jan 20, 2025
Malware in prem-babu-media
1 compromised version
- Jan 20, 2025
Malware in prem-fb-downloader
1 compromised version
- Jan 20, 2025
Malware in prem-babu-fca
1 compromised version
- Jan 20, 2025
Malware in prem-video-downloader
1 compromised version
- Jan 20, 2025
Malware in prem-babu-api
1 compromised version
- Jan 20, 2025
Malware in prem-bot-convo
1 compromised version
- Jan 20, 2025
Malware in prem-downloader
1 compromised version
- Jan 20, 2025
Malware in prem-ig-downloader
1 compromised version
- Jan 20, 2025
Malware in prem-tempy
1 compromised version
- Jan 20, 2025
Malware in prem-media-downloader
1 compromised version
- Jan 20, 2025
Malware in digitalexp-lowcode-runner-app
1 compromised version
- Jan 20, 2025
Malicious code in zapier-platform-boilerplate (npm)
1 compromised version
- Jan 20, 2025
Malicious code in wc-skroutz-analytics (npm)
- Jan 20, 2025
Malicious code in vimium (npm)
1 compromised version
- Jan 20, 2025
Malicious code in storytel.github.io (npm)
2 compromised versions
- Jan 20, 2025
Malicious code in smaato-shared-ui-audience-targeting (npm)
1 compromised version
- Jan 20, 2025
Malicious code in slack-opsgenie-alert-creator (npm)
- Jan 20, 2025
Malicious code in sendbird-moderation-dashboard (npm)
1 compromised version
- Jan 20, 2025
Malicious code in selectkit1 (npm)
- Jan 20, 2025
Malicious code in scrumretro (npm)
- Jan 20, 2025
Malicious code in prombox (npm)
1 compromised version
- Jan 20, 2025
Malicious code in plib-ai-chat-response (npm)
1 compromised version
- Jan 20, 2025
Malicious code in opensea-developer-docs (npm)
3 compromised versions
- Jan 20, 2025
Malicious code in okta-help (npm)
1 compromised version
- Jan 20, 2025
Malicious code in network-update-pricing-options (npm)
1 compromised version
- Jan 20, 2025
Malicious code in mintapp (npm)
1 compromised version
- Jan 20, 2025
Malicious code in mafid (npm)
1 compromised version
- Jan 20, 2025
Malicious code in geotab-sdk (npm)
2 compromised versions
- Jan 20, 2025
Malicious code in flutter_inappwebview (npm)
- Jan 20, 2025
Malicious code in eslint-plugin-paste-internal (npm)
2 compromised versions
- Jan 20, 2025
Malicious code in eslint-config-smaato (npm)
1 compromised version
- Jan 20, 2025
Malicious code in contrast-local-scan-action (npm)
1 compromised version
- Jan 20, 2025
Malicious code in automerge-action (npm)
2 compromised versions
- Jan 20, 2025
Malicious code in adidas-github-io (npm)
1 compromised version
- Jan 20, 2025
Malware in zapier-platform-boilerplate
1 compromised version
- Jan 20, 2025
Malware in okta-help
1 compromised version
- Jan 20, 2025
Malware in operaextensions.js
1 compromised version
- Jan 20, 2025
Malware in mintapp
1 compromised version
Page 6455 of 7,308