Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Dec 9, 2024
Malicious code in romeo_is_here_get-request-package_2 (npm)
1 compromised version
- Dec 9, 2024
Malicious code in romeo_is_here_get-request-package (npm)
1 compromised version
- Dec 9, 2024
Malicious code in robloxmatcher (npm)
1 compromised version
- Dec 9, 2024
Malicious code in robloxint (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in roblox.dll (npm)
1 compromised version
- Dec 9, 2024
Malicious code in rn-quickstart-directcall (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in rivalsgui (npm)
1 compromised version
- Dec 9, 2024
Malicious code in release-automation-action (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in relayer-engine (npm)
1 compromised version
- Dec 9, 2024
Malicious code in react-redux-up (npm)
5 compromised versions
- Dec 9, 2024
Malicious code in react-experimental-builtin (npm)
1 compromised version
- Dec 9, 2024
Malicious code in quickstart-live-audio-only-sample-javascript (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in public-api-signature-calculator-example (npm)
1 compromised version
- Dec 9, 2024
Malicious code in proxyapi-docs (npm)
11 compromised versions
- Dec 9, 2024
Malicious code in programupdater (npm)
1 compromised version
- Dec 9, 2024
Malicious code in programcleanup (npm)
1 compromised version
- Dec 9, 2024
Malicious code in product-documentation (npm)
1 compromised version
- Dec 9, 2024
Malicious code in prismjs-editor-v1 (npm)
1 compromised version
- Dec 9, 2024
Malicious code in powerupdate (npm)
1 compromised version
- Dec 9, 2024
Malicious code in plugin-compiler-bytedance (npm)
1 compromised version
- Dec 9, 2024
Malicious code in platform-api-test-framework (npm)
1 compromised version
- Dec 9, 2024
Malicious code in permissionscaling (npm)
1 compromised version
- Dec 9, 2024
Malicious code in peritter (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in perfetto-dev (npm)
4 compromised versions
- Dec 9, 2024
Malicious code in pagegraph-crawl (npm)
1 compromised version
- Dec 9, 2024
Malicious code in oss-feature-flags (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in ory-docs (npm)
1 compromised version
- Dec 9, 2024
Malicious code in orderly-evm-crosschain (npm)
1 compromised version
- Dec 9, 2024
Malicious code in oneui-angular (npm)
1 compromised version
- Dec 9, 2024
Malicious code in omahaoffice (npm)
1 compromised version
- Dec 9, 2024
Malicious code in old-package-name (npm)
1 compromised version
- Dec 9, 2024
Malicious code in odistube (npm)
4 compromised versions
- Dec 9, 2024
Malicious code in nodes-polyfill-webpack-plugin (npm)
1 compromised version
- Dec 9, 2024
Malicious code in node-polyfill-webpack-plugins (npm)
1 compromised version
- Dec 9, 2024
Malicious code in nf-tvui-spriter (npm)
1 compromised version
- Dec 9, 2024
Malicious code in nf-ase (npm)
1 compromised version
- Dec 9, 2024
Malicious code in nezur (npm)
1 compromised version
- Dec 9, 2024
Malicious code in ne-captcha (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-speedy-components (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-shared (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-service-target-web (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-service-target-mini (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-service-target-lynx (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-service-commands (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-plugin-events (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-max (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-manager-plugins-shared (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-manager (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-client-web (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-client-plugin (npm)
1 compromised version
Page 6483 of 7,308