Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Dec 19, 2024
Malware in upload-artifact
1 compromised version
- Dec 19, 2024
Malware in acm-nano-logger-fe
1 compromised version
- Dec 19, 2024
Malicious code in pzh (npm)
2 compromised versions
- Dec 19, 2024
Malicious code in owc-gravityforms-zaaksysteem (npm)
1 compromised version
- Dec 19, 2024
Malicious code in abacus-frontend (npm)
1 compromised version
- Dec 19, 2024
Malware in owc-gravityforms-zaaksysteem
1 compromised version
- Dec 19, 2024
Malware in pzh
1 compromised version
- Dec 19, 2024
Malware in abacus-frontend
1 compromised version
- Dec 19, 2024
Malicious code in pornhub (npm)
1 compromised version
- Dec 19, 2024
Malicious code in redux-form-v5 (npm)
1 compromised version
- Dec 19, 2024
Malicious code in yandex-pandora-docs (npm)
2 compromised versions
- Dec 18, 2024
Malicious code in auto-assign-team-actionn (npm)
5 compromised versions
- Dec 18, 2024
Malicious code in @goldenfront/core (npm)
1 compromised version
- Dec 18, 2024
Malicious code in bitmex-node-fetch (npm)
1 compromised version
- Dec 18, 2024
Malicious code in ifood2-github-io (npm)
1 compromised version
- Dec 18, 2024
Malicious code in interview-question (npm)
1 compromised version
- Dec 18, 2024
Malicious code in flybook-table (npm)
1 compromised version
- Dec 18, 2024
Malicious code in @hisdk/mail-mac (npm)
1 compromised version
- Dec 18, 2024
Malicious code in @hi.editor/core (npm)
1 compromised version
- Dec 18, 2024
Malicious code in @dz-lib/icon (npm)
1 compromised version
- Dec 18, 2024
Malicious code in @dz-lib/dz-cli (npm)
1 compromised version
- Dec 18, 2024
Malicious code in hardhat-deploy-others (npm)
1 compromised version
- Dec 18, 2024
Malicious code in focal-examples (npm)
3 compromised versions
- Dec 18, 2024
Malicious code in orderly.network (npm)
1 compromised version
- Dec 18, 2024
Malicious code in baby-loris (npm)
2 compromised versions
- Dec 18, 2024
Malicious code in bs-auto-dark-mode (npm)
3 compromised versions
- Dec 18, 2024
Malicious code in @bh-ui/theme (npm)
1 compromised version
- Dec 17, 2024
Malicious code in anargha-manu2324 (npm)
2 compromised versions
- Dec 17, 2024
Malicious code in utilitypyfunc (PyPI)
4 compromised versions
- Dec 17, 2024
Malicious code in onchain-commerce-template (npm)
1 compromised version
- Dec 17, 2024
Malicious code in discordbotstatus (PyPI)
1 compromised version
- Dec 17, 2024
Malicious code in discordbotpresence (PyPI)
1 compromised version
- Dec 17, 2024
Malicious code in yir-image-gen (npm)
2 compromised versions
- Dec 17, 2024
Malicious code in haefgerasgrae (RubyGems)
1 compromised version
- Dec 17, 2024
Malicious code in pai-web-components (npm)
1 compromised version
- Dec 17, 2024
Malicious code in @poclabs/exo-phanto (npm)
1 compromised version
- Dec 17, 2024
Malicious code in hackbro (npm)
- Dec 17, 2024
Malware in fetlla2-js
1 compromised version
- Dec 17, 2024
Malware in hackbron
1 compromised version
- Dec 17, 2024
Malware in hackbro
1 compromised version
- Dec 17, 2024
Malicious code in alifx-media-downloader (npm)
- Dec 17, 2024
Malware in alifx-media-downloader
1 compromised version
- Dec 17, 2024
Malicious code in majidalfuttaim11 (npm)
- Dec 17, 2024
Malware in majidalfuttaim11
1 compromised version
- Dec 17, 2024
Malware in simulation_service
1 compromised version
- Dec 17, 2024
Malware in orizuru
1 compromised version
- Dec 17, 2024
Malware in rarible-program-library
1 compromised version
- Dec 17, 2024
Malicious code in supply-chain-planner (npm)
- Dec 17, 2024
Malicious code in dex12212 (npm)
1 compromised version
- Dec 17, 2024
Malware in lana-ws
1 compromised version
Page 6475 of 7,308