Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Dec 9, 2024
Malicious code in vulnerabledriver (npm)
1 compromised version
- Dec 9, 2024
Malicious code in vue3-tiktok (npm)
1 compromised version
- Dec 9, 2024
Malicious code in vue2-tiktok (npm)
1 compromised version
- Dec 9, 2024
Malicious code in vue-nect (npm)
1 compromised version
- Dec 9, 2024
Malicious code in vue-cli-plugin-changelog (npm)
1 compromised version
- Dec 9, 2024
Malicious code in vscode-dotnet-runtime (npm)
1 compromised version
- Dec 9, 2024
Malicious code in velos-lp-ui (npm)
1 compromised version
- Dec 9, 2024
Malicious code in varmor (npm)
1 compromised version
- Dec 9, 2024
Malicious code in updkernels (npm)
1 compromised version
- Dec 9, 2024
Malicious code in updatescan (npm)
1 compromised version
- Dec 9, 2024
Malicious code in update-button-module (npm)
1 compromised version
- Dec 9, 2024
Malicious code in unlock-wave (npm)
1 compromised version
- Dec 9, 2024
Malicious code in unity-react-resolver (npm)
30 compromised versions
- Dec 9, 2024
Malicious code in ui-cluster-driver-civo (npm)
1 compromised version
- Dec 9, 2024
Malicious code in typedoc-gen (npm)
1 compromised version
- Dec 9, 2024
Malicious code in tsclient.engage.aperture (npm)
1 compromised version
- Dec 9, 2024
Malicious code in travix-addon (npm)
1 compromised version
- Dec 9, 2024
Malicious code in todmsmsdsd (npm)
1 compromised version
- Dec 9, 2024
Malicious code in thd-localizer (npm)
5 compromised versions
- Dec 9, 2024
Malicious code in testsupplierapp (npm)
1 compromised version
- Dec 9, 2024
Malicious code in test-23456 (npm)
1 compromised version
- Dec 9, 2024
Malicious code in template-vue-js (npm)
1 compromised version
- Dec 9, 2024
Malicious code in template-vanilla-ts (npm)
1 compromised version
- Dec 9, 2024
Malicious code in tebex_checkout_api (npm)
5 compromised versions
- Dec 9, 2024
Malicious code in tatatata (npm)
1 compromised version
- Dec 9, 2024
Malicious code in take4-hello-world (npm)
1 compromised version
- Dec 9, 2024
Malicious code in sysscan (npm)
1 compromised version
- Dec 9, 2024
Malicious code in string-utility-assistant (npm)
1 compromised version
- Dec 9, 2024
Malicious code in solhint-plugin-yearn (npm)
1 compromised version
- Dec 9, 2024
Malicious code in solaramatcher (npm)
1 compromised version
- Dec 9, 2024
Malicious code in solarainstaller (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in solara.update (npm)
1 compromised version
- Dec 9, 2024
Malicious code in solara.dll (npm)
1 compromised version
- Dec 9, 2024
Malicious code in solara-installer (npm)
1 compromised version
- Dec 9, 2024
Malicious code in solara-cleanup (npm)
3 compromised versions
- Dec 9, 2024
Malicious code in solara-builder (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in sheets-mixpanel (npm)
1 compromised version
- Dec 9, 2024
Malicious code in shasha487 (npm)
1 compromised version
- Dec 9, 2024
Malicious code in sendbird-moderation-dashboard-node (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in sendbird-chatgpt-sample-react (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in semi-ux (npm)
1 compromised version
- Dec 9, 2024
Malicious code in semi-d2c-typings (npm)
1 compromised version
- Dec 9, 2024
Malicious code in semi-animation-styled (npm)
1 compromised version
- Dec 9, 2024
Malicious code in semi-animation-react (npm)
1 compromised version
- Dec 9, 2024
Malicious code in semi-adimation (npm)
1 compromised version
- Dec 9, 2024
Malicious code in securitytest3 (npm)
1 compromised version
- Dec 9, 2024
Malicious code in sdk-sanity-generator (npm)
3 compromised versions
- Dec 9, 2024
Malicious code in sdk-interface (npm)
1 compromised version
- Dec 9, 2024
Malicious code in rspack-tests-tools (npm)
1 compromised version
- Dec 9, 2024
Malicious code in rspack-test-tool (npm)
1 compromised version
Page 6482 of 7,308