Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Jan 20, 2025
Malicious code in sparo-output-test (npm)
1 compromised version
- Jan 20, 2025
Malicious code in jazz_token-authorizer (npm)
1 compromised version
- Jan 20, 2025
Malicious code in chrome-api-utils (npm)
1 compromised version
- Jan 20, 2025
Malicious code in 3cx-call-control-apps (npm)
1 compromised version
- Jan 20, 2025
Malware in uber-direct-js-sdk-examples
1 compromised version
- Jan 20, 2025
Malware in jazz_token-authorizer
1 compromised version
- Jan 20, 2025
Malware in 3cx-call-control-apps
1 compromised version
- Jan 20, 2025
Malware in firefox-ios
1 compromised version
- Jan 20, 2025
Malware in tree-sitter-strings
1 compromised version
- Jan 20, 2025
Malware in v2raya
1 compromised version
- Jan 20, 2025
Malware in aem-react-spa
1 compromised version
- Jan 20, 2025
Malware in issue-label-notification-action
1 compromised version
- Jan 20, 2025
Malware in symphony-familiarity
1 compromised version
- Jan 20, 2025
Malware in muzeeglot
1 compromised version
- Jan 20, 2025
Malware in sparo-output-test
1 compromised version
- Jan 20, 2025
Malware in zoomapps-texteditor-vuejs
1 compromised version
- Jan 20, 2025
Malware in chrome-api-utils
1 compromised version
- Jan 20, 2025
Malware in webinarwebhookapp
1 compromised version
- Jan 20, 2025
Malware in lambda-demo
1 compromised version
- Jan 20, 2025
Malware in pre-commit-tasks
1 compromised version
- Jan 20, 2025
Malware in player-workshop
1 compromised version
- Jan 20, 2025
Malicious code in bridge-transaction-parser (npm)
2 compromised versions
- Jan 20, 2025
Malicious code in classic-theme (npm)
2 compromised versions
- Jan 19, 2025
Malicious code in bc-nuxt-vue-starter (npm)
1 compromised version
- Jan 19, 2025
Malicious code in react-native-apollo-devtools (npm)
1 compromised version
- Jan 19, 2025
Malicious code in snapon-imageviewer-lw (npm)
2 compromised versions
- Jan 19, 2025
Malicious code in snapon-imageviewer (npm)
1 compromised version
- Jan 19, 2025
Malicious code in @moneyguide-devkit/style-provider (npm)
2 compromised versions
- Jan 19, 2025
Malicious code in next-refresh-token (npm)
2 compromised versions
- Jan 19, 2025
Malicious code in openssl-node (npm)
- Jan 19, 2025
Malicious code in serve-static-corell (npm)
2 compromised versions
- Jan 19, 2025
Malicious code in cumulus-dashboard (npm)
1 compromised version
- Jan 18, 2025
Malicious code in dbximgs (npm)
1 compromised version
- Jan 18, 2025
Malicious code in tagmyphotosblog (npm)
1 compromised version
- Jan 18, 2025
Malicious code in keystone-app (npm)
1 compromised version
- Jan 18, 2025
Malicious code in payment-integration-template (npm)
1 compromised version
- Jan 16, 2025
Malicious code in karma-fest-preprocessor (npm)
3 compromised versions
- Jan 16, 2025
Malicious code in jssdk-infrastructure (npm)
3 compromised versions
- Jan 16, 2025
Malware in jssdk-infrastructure
1 compromised version
- Jan 16, 2025
Malware in karma-fest-preprocessor
1 compromised version
- Jan 15, 2025
Malicious code in netflixdesign (npm)
1 compromised version
- Jan 15, 2025
Malicious code in venmo-ui (npm)
2 compromised versions
- Jan 15, 2025
Malicious code in hello-hamid-world-npm-new (npm)
- Jan 15, 2025
Malware in grabathon-4.0
1 compromised version
- Jan 15, 2025
Malware in hello-hamid-world-npm-new
1 compromised version
- Jan 15, 2025
Malicious code in gouraud-lighting (npm)
1 compromised version
- Jan 15, 2025
Malware in gouraud-lighting
1 compromised version
- Jan 14, 2025
Malicious code in awsglueml (PyPI)
1 compromised version
- Jan 14, 2025
Malicious code in awsgluedq (PyPI)
3 compromised versions
- Jan 14, 2025
Malicious code in aws-glue (PyPI)
2 compromised versions
Page 6460 of 7,308