Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Dec 12, 2024
Malware in fake-emitter-no-schema
1 compromised version
- Dec 12, 2024
Malware in jquery.slideviewer
1 compromised version
- Dec 12, 2024
Malware in fake-yaml
1 compromised version
- Dec 12, 2024
Malware in appetize-cli
1 compromised version
- Dec 12, 2024
Malware in fake-emitter
1 compromised version
- Dec 12, 2024
Malware in auto-plugin-appetize-cleanup
1 compromised version
- Dec 12, 2024
Malware in less-rhino
1 compromised version
- Dec 12, 2024
Malware in normal-dep
1 compromised version
- Dec 12, 2024
Malicious code in web-app-search (npm)
1 compromised version
- Dec 12, 2024
Malicious code in internal-website (npm)
- Dec 12, 2024
Malware in cloud-functions-schedule-instance
1 compromised version
- Dec 12, 2024
Malware in snap-kit-react-native
1 compromised version
- Dec 12, 2024
Malware in internal-website
1 compromised version
- Dec 12, 2024
Malware in remix-kl-c646
1 compromised version
- Dec 12, 2024
Malware in calendervue
1 compromised version
- Dec 12, 2024
Malware in editor-devel
1 compromised version
- Dec 12, 2024
Malware in canvaskit-local
1 compromised version
- Dec 12, 2024
Malware in anumanu2324
1 compromised version
- Dec 12, 2024
Malware in ml-keyframer
1 compromised version
- Dec 12, 2024
Malware in blacky-sheppoing
1 compromised version
- Dec 12, 2024
Malware in qwilr-examples-create-page
1 compromised version
- Dec 12, 2024
Malware in symphony-markdown
1 compromised version
- Dec 12, 2024
Malware in paypal-js-root
1 compromised version
- Dec 12, 2024
Malware in camera-kit-react-native-example
1 compromised version
- Dec 12, 2024
Malware in adminconsole
1 compromised version
- Dec 12, 2024
Malicious code in anumanu2324 (npm)
1 compromised version
- Dec 11, 2024
Malicious code in paypal-js-root (npm)
1 compromised version
- Dec 11, 2024
Malicious code in snap-kit-react-native (npm)
1 compromised version
- Dec 11, 2024
Malicious code in shyftportal (npm)
1 compromised version
- Dec 11, 2024
Malicious code in goworker (npm)
1 compromised version
- Dec 11, 2024
Malicious code in @fandom-frontend/react-common (npm)
1 compromised version
- Dec 11, 2024
Malicious code in @aoflmkt/is-desktop (npm)
1 compromised version
- Dec 11, 2024
Malicious code in @aoflmkt/app-call (npm)
1 compromised version
- Dec 11, 2024
Malicious code in @flutteruki-gaming/eslint-config-flutteruki-gaming (npm)
1 compromised version
- Dec 11, 2024
Malicious code in @flutteruki-gaming/test-eslint-config-flutteruki-gaming (npm)
3 compromised versions
- Dec 11, 2024
Malicious code in test-wasim (npm)
1 compromised version
- Dec 11, 2024
Malicious code in blacky-sheppoing (npm)
1 compromised version
- Dec 11, 2024
Malicious code in jitsi-meet-load-test (npm)
1 compromised version
- Dec 11, 2024
Malicious code in lib-jitsi-meet-sample (npm)
1 compromised version
- Dec 11, 2024
Malicious code in plugin-proposal-json-strings (npm)
- Dec 11, 2024
Malware in plugin-proposal-json-strings
1 compromised version
- Dec 10, 2024
Malicious code in okxweb3 (npm)
3 compromised versions
- Dec 10, 2024
Malicious code in weekendfe (npm)
1 compromised version
- Dec 10, 2024
Malicious code in plugin-e2e-tests (npm)
1 compromised version
- Dec 10, 2024
Malicious code in spot-admin (npm)
1 compromised version
- Dec 10, 2024
Malicious code in themes-vendor (npm)
1 compromised version
- Dec 10, 2024
Malicious code in orbit-playroom (npm)
1 compromised version
- Dec 10, 2024
Malicious code in @opentelemetrya/api (npm)
1 compromised version
- Dec 10, 2024
Malicious code in ico-maker (npm)
2 compromised versions
- Dec 10, 2024
Malicious code in detection-rules-explorer (npm)
4 compromised versions
Page 6479 of 7,308