Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Dec 8, 2024
Malicious code in auto-plugin-appetize-cleanup (npm)
1 compromised version
- Dec 8, 2024
Malicious code in appetize-cli (npm)
1 compromised version
- Dec 7, 2024
Malicious code in adminconsole (npm)
1 compromised version
- Dec 7, 2024
Malicious code in yelp-logging (npm)
2 compromised versions
- Dec 7, 2024
Malicious code in zkonmina (npm)
3 compromised versions
- Dec 7, 2024
Malicious code in react-pillbox (npm)
1 compromised version
- Dec 7, 2024
Malicious code in testing-bounty123 (npm)
1 compromised version
- Dec 7, 2024
Malicious code in calendervue (npm)
1 compromised version
- Dec 7, 2024
Malicious code in qwilr-examples-create-page (npm)
1 compromised version
- Dec 7, 2024
Malicious code in editor-devel (npm)
1 compromised version
- Dec 7, 2024
Malicious code in remix-kl-c646 (npm)
1 compromised version
- Dec 7, 2024
Malicious code in normal-dep (npm)
1 compromised version
- Dec 7, 2024
Malicious code in file-dep-a (npm)
1 compromised version
- Dec 7, 2024
Malicious code in usdc.js (npm)
1 compromised version
- Dec 6, 2024
Malicious code in prettier-v3-for-testing (npm)
2 compromised versions
- Dec 6, 2024
Malicious code in debugger-local (npm)
1 compromised version
- Dec 6, 2024
Malicious code in @tradm/my_package_legit (npm)
12 compromised versions
- Dec 6, 2024
Malicious code in ripple-blobvault (npm)
1 compromised version
- Dec 6, 2024
Malicious code in asuuuuu (npm)
1 compromised version
- Dec 6, 2024
Malicious code in openpass-sample-sites-client-js-sdk (npm)
2 compromised versions
- Dec 6, 2024
Malicious code in openpass-sample-sites-piano-io (npm)
6 compromised versions
- Dec 5, 2024
Malware in testing-logger-bush1do-c0de
1 compromised version
- Dec 5, 2024
Malicious code in privy-frames-drop (npm)
1 compromised version
- Dec 5, 2024
Malicious code in intgraphx (PyPI)
1 compromised version
- Dec 5, 2024
Malicious code in graphicsx (PyPI)
1 compromised version
- Dec 5, 2024
Malicious code in flamepro (PyPI)
1 compromised version
- Dec 5, 2024
Malicious code in dbsxrchpro (PyPI)
1 compromised version
- Dec 5, 2024
Malicious code in keccak-crypto (npm)
4 compromised versions
- Dec 5, 2024
Malicious code in jsonwebtoken-js (npm)
3 compromised versions
- Dec 5, 2024
Malicious code in crypto-chalk (npm)
2 compromised versions
- Dec 5, 2024
Malicious code in ba-graphics (npm)
1 compromised version
- Dec 5, 2024
Malicious code in @wix-platform/velo-multilingual-helper-backend (npm)
1 compromised version
- Dec 5, 2024
Malicious code in cdp-agentkit-core (npm)
1 compromised version
- Dec 5, 2024
Malicious code in vareapi (npm)
- Dec 5, 2024
Malware in vareapi
1 compromised version
- Dec 5, 2024
Malicious code in finn-pulse-init (npm)
2 compromised versions
- Dec 5, 2024
Malicious code in buoyant-utils (npm)
2 compromised versions
- Dec 5, 2024
Malicious code in coldbox (npm)
2 compromised versions
- Dec 5, 2024
Malicious code in pentest-helper (npm)
1 compromised version
- Dec 5, 2024
Malware in pentest-helper
1 compromised version
- Dec 5, 2024
Malicious code in ic-master-wordpress (npm)
1 compromised version
- Dec 5, 2024
Malware in ic-master-wordpress
1 compromised version
- Dec 5, 2024
Malicious code in crypto-layout-utils (npm)
- Dec 5, 2024
Malware in crypto-layout-utils
1 compromised version
- Dec 5, 2024
Malicious code in ndbench-ui (npm)
2 compromised versions
- Dec 5, 2024
Malicious code in kubernetes-agent-nfs-watchdog (npm)
1 compromised version
- Dec 5, 2024
Malware in ffers
1 compromised version
- Dec 5, 2024
Malware in nfs-server-alpine
1 compromised version
- Dec 5, 2024
Malware in ndbench-ui
1 compromised version
- Dec 5, 2024
Malware in kubernetes-agent-nfs-watchdog
1 compromised version
Page 6487 of 7,308