Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Nov 27, 2024
Malicious code in shop-market-uss (npm)
1 compromised version
- Nov 27, 2024
Malware in seller-admin-common
1 compromised version
- Nov 27, 2024
Malware in seller-node-logger
1 compromised version
- Nov 27, 2024
Malware in shop-market-uss
1 compromised version
- Nov 27, 2024
Malware in preact-cli-build
1 compromised version
- Nov 27, 2024
Malware in ssc-org-vue
1 compromised version
- Nov 27, 2024
Malware in opa-fe-base
1 compromised version
- Nov 27, 2024
Malware in transify-helper-cli
1 compromised version
- Nov 27, 2024
Malware in rn-native-portals
1 compromised version
- Nov 27, 2024
Malware in seller-webchat-utils
1 compromised version
- Nov 27, 2024
Malicious code in gapi-ts (npm)
2 compromised versions
- Nov 27, 2024
Malware in gapi-ts
1 compromised version
- Nov 27, 2024
Malware in lightweight-store
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-mark-i18n
1 compromised version
- Nov 27, 2024
Malware in airpay-js-sdk
1 compromised version
- Nov 27, 2024
Malicious code in @hmp/casepaper (npm)
5 compromised versions
- Nov 27, 2024
Malicious code in toast-pack (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in ssc-element-pro (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in shopee-ui-automatic-import-loader (npm)
1 compromised version
- Nov 27, 2024
Malicious code in secure-fetch-utils-stable (npm)
1 compromised version
- Nov 27, 2024
Malicious code in react-dnd11-html5-backend (npm)
1 compromised version
- Nov 27, 2024
Malicious code in pfms-feedback (npm)
2 compromised versions
- Nov 27, 2024
Malware in react-dnd11-html5-backend
1 compromised version
- Nov 27, 2024
Malware in web_enhance_sap-latest
1 compromised version
- Nov 27, 2024
Malware in toast-pack
1 compromised version
- Nov 27, 2024
Malware in pfms-feedback
1 compromised version
- Nov 27, 2024
Malware in seller-listing-common
1 compromised version
- Nov 27, 2024
Malware in rich-text-slate-rc
1 compromised version
- Nov 27, 2024
Malware in secure-fetch-utils-stable
1 compromised version
- Nov 27, 2024
Malware in oms-frontend
1 compromised version
- Nov 27, 2024
Malware in cljs-dopeloop
1 compromised version
- Nov 27, 2024
Malware in markservice
1 compromised version
- Nov 27, 2024
Malware in shopee-ui-automatic-import-loader
1 compromised version
- Nov 27, 2024
Malware in ssc-element-pro
1 compromised version
- Nov 27, 2024
Malicious code in json-schema-editor-visual-yapi (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in fulfillment-common (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in ads-common-components (npm)
3 compromised versions
- Nov 27, 2024
Malware in ads-common-components
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-internal-playwright
1 compromised version
- Nov 27, 2024
Malware in json-schema-editor-visual-yapi
1 compromised version
- Nov 27, 2024
Malware in fulfillment-common
1 compromised version
- Nov 27, 2024
Malicious code in spid-growth-notifier-config (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in shopee-rich-editor (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in release-platform-utils (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in react-common-lib (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in nodejs-prom-reporter (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in item-sold-count (npm)
1 compromised version
- Nov 27, 2024
Malicious code in fe-prometheus-report (npm)
2 compromised versions
- Nov 27, 2024
Malware in react-common-lib
1 compromised version
- Nov 27, 2024
Malware in spid-growth-notifier-config
1 compromised version
Page 6496 of 7,308