Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Jan 20, 2025
Malware in tyk-developer-portal
1 compromised version
- Jan 20, 2025
Malware in smaato-shared-ui-audience-targeting
1 compromised version
- Jan 20, 2025
Malware in plib-ai-chat-response
1 compromised version
- Jan 20, 2025
Malware in selectkit1
1 compromised version
- Jan 20, 2025
Malware in eslint-config-smaato
1 compromised version
- Jan 20, 2025
Malware in bitdefender-sitemap-creator
1 compromised version
- Jan 20, 2025
Malware in wc-skroutz-analytics
1 compromised version
- Jan 20, 2025
Malware in prombox
1 compromised version
- Jan 20, 2025
Malware in eslint-plugin-paste-internal
1 compromised version
- Jan 20, 2025
Malware in storytel.github.io
1 compromised version
- Jan 20, 2025
Malware in sendbird-moderation-dashboard
1 compromised version
- Jan 20, 2025
Malware in nuget.shouldly
1 compromised version
- Jan 20, 2025
Malware in geotab-sdk
1 compromised version
- Jan 20, 2025
Malware in mafid
1 compromised version
- Jan 20, 2025
Malware in opensea-developer-docs
1 compromised version
- Jan 20, 2025
Malware in scrumretro
1 compromised version
- Jan 20, 2025
Malware in flutter_inappwebview
1 compromised version
- Jan 20, 2025
Malware in vimium
1 compromised version
- Jan 20, 2025
Malware in adidas-github-io
1 compromised version
- Jan 20, 2025
Malware in network-update-pricing-options
1 compromised version
- Jan 20, 2025
Malware in lerna-monorepo2
1 compromised version
- Jan 20, 2025
Malware in slack-opsgenie-alert-creator
1 compromised version
- Jan 20, 2025
Malware in automerge-action
1 compromised version
- Jan 20, 2025
Malware in contrast-local-scan-action
1 compromised version
- Jan 20, 2025
Malware in shopify-ecommerce-shopping-cart
1 compromised version
- Jan 20, 2025
Malicious code in percy-cake-electron-app (npm)
1 compromised version
- Jan 20, 2025
Malicious code in kubeflow-pipelines (npm)
1 compromised version
- Jan 20, 2025
Malicious code in com.unity.assetbundlebrowser (npm)
2 compromised versions
- Jan 20, 2025
Malicious code in babel-plugin-styled-componentsss (npm)
1 compromised version
- Jan 20, 2025
Malware in com.unity.assetbundlebrowser
1 compromised version
- Jan 20, 2025
Malware in com.unity.assetgraph
1 compromised version
- Jan 20, 2025
Malware in kubeflow-pipelines
1 compromised version
- Jan 20, 2025
Malware in label-merge-conflicts-action
1 compromised version
- Jan 20, 2025
Malware in spacexstats
1 compromised version
- Jan 20, 2025
Malware in percy-cake-electron-app
1 compromised version
- Jan 20, 2025
Malware in orderly.network
1 compromised version
- Jan 20, 2025
Malware in babel-plugin-styled-componentsss
1 compromised version
- Jan 20, 2025
Malicious code in testing-in-reise (npm)
3 compromised versions
- Jan 20, 2025
Malicious code in podium-pride (npm)
1 compromised version
- Jan 20, 2025
Malicious code in lit-2 (npm)
3 compromised versions
- Jan 20, 2025
Malicious code in frontend-testing-redefined (npm)
2 compromised versions
- Jan 20, 2025
Malicious code in circuit-breaking (npm)
2 compromised versions
- Jan 20, 2025
Malicious code in braze-web-sdk (npm)
1 compromised version
- Jan 20, 2025
Malware in braze-web-sdk
1 compromised version
- Jan 20, 2025
Malware in testing-in-reise
1 compromised version
- Jan 20, 2025
Malware in podium-pride
1 compromised version
- Jan 20, 2025
Malware in frontend-testing-redefined
1 compromised version
- Jan 20, 2025
Malware in circuit-breaking
1 compromised version
- Jan 20, 2025
Malware in lit-3
1 compromised version
- Jan 20, 2025
Malware in lit-2
1 compromised version
Page 6456 of 7,308