Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Dec 9, 2024
Malicious code in mona-client-max (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mkh-responsive (npm)
30 compromised versions
- Dec 9, 2024
Malicious code in minife_node (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mina-wasm-mvp (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mhn-malicious1 (npm)
1 compromised version
- Dec 9, 2024
Malicious code in metamask-extension-generate-attributions (npm)
3 compromised versions
- Dec 9, 2024
Malicious code in message-template-app (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in material-ui-codemod (npm)
3 compromised versions
- Dec 9, 2024
Malicious code in manoj-task-addons (npm)
1 compromised version
- Dec 9, 2024
Malicious code in maker-governance-dashboard-server (npm)
1 compromised version
- Dec 9, 2024
Malicious code in magicmicroservices (npm)
1 compromised version
- Dec 9, 2024
Malicious code in lvbypasser (npm)
1 compromised version
- Dec 9, 2024
Malicious code in kskjdksjdks (npm)
1 compromised version
- Dec 9, 2024
Malicious code in ksdsjdksjmncnjsdmsnd (npm)
1 compromised version
- Dec 9, 2024
Malicious code in keli-dywomen (npm)
1 compromised version
- Dec 9, 2024
Malicious code in kali-dywoman (npm)
1 compromised version
- Dec 9, 2024
Malicious code in jsmaterialx (npm)
1 compromised version
- Dec 9, 2024
Malicious code in js-austt (npm)
1 compromised version
- Dec 9, 2024
Malicious code in itminepack101 (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in internallib_v495 (npm)
3 compromised versions
- Dec 9, 2024
Malicious code in ilogtail (npm)
1 compromised version
- Dec 9, 2024
Malicious code in iherb-react-environment (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in iconpark (npm)
1 compromised version
- Dec 9, 2024
Malicious code in i18-utils (npm)
1 compromised version
- Dec 9, 2024
Malicious code in hwidrefresh (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in hosted-buttons (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in gradio-ui (npm)
1 compromised version
- Dec 9, 2024
Malicious code in get-matcha (npm)
1 compromised version
- Dec 9, 2024
Malicious code in ganash (npm)
1 compromised version
- Dec 9, 2024
Malicious code in frontpfr (npm)
1 compromised version
- Dec 9, 2024
Malicious code in fisch (npm)
1 compromised version
- Dec 9, 2024
Malicious code in finaustt (npm)
1 compromised version
- Dec 9, 2024
Malicious code in facet-mmleditor (npm)
1 compromised version
- Dec 9, 2024
Malicious code in evocateur_libnpmpublisher (npm)
1 compromised version
- Dec 9, 2024
Malicious code in evocateur_libnpmpublisheing (npm)
1 compromised version
- Dec 9, 2024
Malicious code in evocateur_libnpmpublic (npm)
1 compromised version
- Dec 9, 2024
Malicious code in evocateur-libnpmpublish (npm)
1 compromised version
- Dec 9, 2024
Malicious code in evocater_libpnpmpublic (npm)
1 compromised version
- Dec 9, 2024
Malicious code in evocater_libnpmpublish (npm)
1 compromised version
- Dec 9, 2024
Malicious code in eth-austt (npm)
1 compromised version
- Dec 9, 2024
Malicious code in eslint-plugin-woocommerce (npm)
1 compromised version
- Dec 9, 2024
Malicious code in eslint-config-ui-core-base (npm)
1 compromised version
- Dec 9, 2024
Malicious code in eslint-config-onyx-ui-base (npm)
1 compromised version
- Dec 9, 2024
Malicious code in eslint-config-goldeneye (npm)
1 compromised version
- Dec 9, 2024
Malicious code in ens-austt (npm)
1 compromised version
- Dec 9, 2024
Malicious code in elkeid (npm)
1 compromised version
- Dec 9, 2024
Malicious code in electron_npm_deps (npm)
3 compromised versions
- Dec 9, 2024
Malicious code in eff-minifeapp (npm)
1 compromised version
- Dec 9, 2024
Malicious code in docs-ux (npm)
1 compromised version
- Dec 9, 2024
Malicious code in discord-clone (npm)
2 compromised versions
Page 6484 of 7,308