Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Jan 20, 2025
Malware in aaguid
1 compromised version
- Jan 20, 2025
Malware in stylexjs-scripts
1 compromised version
- Jan 20, 2025
Malware in lib-wallet-store
1 compromised version
- Jan 20, 2025
Malware in solhint-config-keep
1 compromised version
- Jan 20, 2025
Malware in webpack-next
1 compromised version
- Jan 20, 2025
Malware in hd-base
1 compromised version
- Jan 20, 2025
Malware in redux-form-v5
1 compromised version
- Jan 20, 2025
Malware in tt4b
1 compromised version
- Jan 20, 2025
Malicious code in random-generator-decimal (npm)
- Jan 20, 2025
Malicious code in jsexports (npm)
- Jan 20, 2025
Malicious code in bundle-cryp (npm)
- Jan 20, 2025
Malware in random-generator-decimal
1 compromised version
- Jan 20, 2025
Malware in bundle-cryp
1 compromised version
- Jan 20, 2025
Malware in jsexports
1 compromised version
- Jan 20, 2025
Malicious code in tree-sitter-pkl (npm)
3 compromised versions
- Jan 20, 2025
Malicious code in platform-browser-dynamic (npm)
- Jan 20, 2025
Malicious code in nimiq-validators-trustscore (npm)
1 compromised version
- Jan 20, 2025
Malicious code in nimiq-pool (npm)
1 compromised version
- Jan 20, 2025
Malicious code in nimiq-albatross-policy (npm)
1 compromised version
- Jan 20, 2025
Malicious code in flow-for-vscode (npm)
1 compromised version
- Jan 20, 2025
Malicious code in core-example (npm)
1 compromised version
- Jan 20, 2025
Malicious code in console-webapp-static-server (npm)
1 compromised version
- Jan 20, 2025
Malicious code in ai-playground (npm)
2 compromised versions
- Jan 20, 2025
Malware in console-webapp-static-server
1 compromised version
- Jan 20, 2025
Malware in nimiq-pool
1 compromised version
- Jan 20, 2025
Malware in grr-ui
1 compromised version
- Jan 20, 2025
Malware in flow-for-vscode
1 compromised version
- Jan 20, 2025
Malware in core-example
1 compromised version
- Jan 20, 2025
Malware in nimiq-validators-trustscore
1 compromised version
- Jan 20, 2025
Malware in treedome
1 compromised version
- Jan 20, 2025
Malware in tree-sitter-pkl
1 compromised version
- Jan 20, 2025
Malware in nimiq-albatross-policy
1 compromised version
- Jan 20, 2025
Malware in platform-browser-dynamic
1 compromised version
- Jan 20, 2025
Malware in ai-playground
1 compromised version
- Jan 20, 2025
Malware in pkl-vscode
1 compromised version
- Jan 20, 2025
Malware in cbpay-js
1 compromised version
- Jan 20, 2025
Malicious code in as-essential (npm)
- Jan 20, 2025
Malicious code in ad-shield-webpack (npm)
- Jan 20, 2025
Malicious code in ad-shield-essential-test (npm)
- Jan 20, 2025
Malicious code in ad-shield-essential (npm)
- Jan 20, 2025
Malicious code in ad-shield (npm)
- Jan 20, 2025
Malware in as-essential
1 compromised version
- Jan 20, 2025
Malware in ad-shield
1 compromised version
- Jan 20, 2025
Malware in ad-shield-webpack
1 compromised version
- Jan 20, 2025
Malware in ad-shield-essential-test
1 compromised version
- Jan 20, 2025
Malware in ad-shield-essential
1 compromised version
- Jan 20, 2025
Malware in zetessf
1 compromised version
- Jan 20, 2025
Malware in jiolocate-ui
1 compromised version
- Jan 20, 2025
Malware in jpl-branding
1 compromised version
- Jan 20, 2025
Malicious code in uber-direct-js-sdk-examples (npm)
1 compromised version
Page 6459 of 7,308