Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Dec 5, 2024
Malicious code in pantheon-documentation (npm)
1 compromised version
- Dec 5, 2024
Malware in plaidreactnativedemo
1 compromised version
- Dec 5, 2024
Malware in octopus-library
1 compromised version
- Dec 5, 2024
Malware in decode-2021-fe
1 compromised version
- Dec 5, 2024
Malware in pantheon-documentation
1 compromised version
- Dec 5, 2024
Malware in koho-charity-api
1 compromised version
- Dec 5, 2024
Malicious code in quintoandar-jwt (npm)
1 compromised version
- Dec 4, 2024
Malicious code in private-lib-bug-bounty (npm)
1 compromised version
- Dec 4, 2024
Malicious code in cdp-agentkit (npm)
1 compromised version
- Dec 4, 2024
Malicious code in cdp-agentkit-nodejs (npm)
1 compromised version
- Dec 4, 2024
Malicious code in pocfinalone.js (npm)
1 compromised version
- Dec 4, 2024
Malicious code in com.bovinelabs.analyzers (npm)
1 compromised version
- Dec 4, 2024
Malicious code in vue-midata (npm)
1 compromised version
- Dec 4, 2024
Malicious code in huggingleg2 (PyPI)
1 compromised version
- Dec 4, 2024
Malware in sinbad-dev
1 compromised version
- Dec 4, 2024
Malware in deriv-app-id-action
1 compromised version
- Dec 4, 2024
Malicious code in wrapped-tokens (npm)
- Dec 4, 2024
Malicious code in fastify-tfb (npm)
1 compromised version
- Dec 4, 2024
Malware in dancer-pipeline
1 compromised version
- Dec 4, 2024
Malware in spliffy-benchmark
1 compromised version
- Dec 4, 2024
Malware in embrace-helloworld
1 compromised version
- Dec 4, 2024
Malware in fastify-tfb
1 compromised version
- Dec 4, 2024
Malware in plaid-tiny-quickstart
1 compromised version
- Dec 4, 2024
Malware in mongoose-4
1 compromised version
- Dec 4, 2024
Malware in wrapped-tokens
1 compromised version
- Dec 4, 2024
Malware in dashlane-vscode
1 compromised version
- Dec 4, 2024
Malware in quill-icons-park
1 compromised version
- Dec 4, 2024
Malware in xcasset-gen
1 compromised version
- Dec 4, 2024
Malware in pixiv-novel-editor
1 compromised version
- Dec 4, 2024
Malware in d11-foo
1 compromised version
- Dec 4, 2024
Malicious code in web3-executor (npm)
4 compromised versions
- Dec 4, 2024
Malware in web3-executor
1 compromised version
- Dec 4, 2024
Malicious code in stacks-blockchain-dist-tool (npm)
- Dec 4, 2024
Malicious code in set-pr-description-action (npm)
1 compromised version
- Dec 4, 2024
Malicious code in com.immutable.marketplace (npm)
1 compromised version
- Dec 4, 2024
Malicious code in codat-docs (npm)
1 compromised version
- Dec 4, 2024
Malicious code in basic-preset-minting (npm)
2 compromised versions
- Dec 4, 2024
Malicious code in auto-cancel-redundant-job (npm)
1 compromised version
- Dec 4, 2024
Malware in com.immutable.orderbook
1 compromised version
- Dec 4, 2024
Malware in eth-based-p2p-e2e-latency
1 compromised version
- Dec 4, 2024
Malware in autolink-jira-issue
1 compromised version
- Dec 4, 2024
Malware in set-pr-description-action
1 compromised version
- Dec 4, 2024
Malware in activity_logs_monitoring
1 compromised version
- Dec 4, 2024
Malware in stacks-blockchain-dist-tool
1 compromised version
- Dec 4, 2024
Malware in clarity-lsp
1 compromised version
- Dec 4, 2024
Malware in clarity-vs-code-web-client
1 compromised version
- Dec 4, 2024
Malware in lunar-root
1 compromised version
- Dec 4, 2024
Malware in com.immutable.api.zkevm
1 compromised version
- Dec 4, 2024
Malware in jigasi-haproxy-agent
1 compromised version
- Dec 4, 2024
Malware in immutable-axelar-bridge
1 compromised version
Page 6488 of 7,308