Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Nov 27, 2024
Malware in shopee-rich-editor
1 compromised version
- Nov 27, 2024
Malware in seller-webchat-common
1 compromised version
- Nov 27, 2024
Malware in marketing-jest-cli
1 compromised version
- Nov 27, 2024
Malware in item-sold-count
1 compromised version
- Nov 27, 2024
Malware in seatalk-protocol
1 compromised version
- Nov 27, 2024
Malware in seller-fulfillment-common
1 compromised version
- Nov 27, 2024
Malware in fe-prometheus-report
1 compromised version
- Nov 27, 2024
Malware in release-platform-utils
1 compromised version
- Nov 27, 2024
Malware in nodejs-prom-reporter
1 compromised version
- Nov 27, 2024
Malicious code in vs-table-plugins-antd (npm)
1 compromised version
- Nov 27, 2024
Malicious code in tbi-editor (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in shopee-pcs-ui (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in seller-webchat-build-sdk (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in release-notice (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in react-big-calendar2 (npm)
1 compromised version
- Nov 27, 2024
Malware in release-notice
1 compromised version
- Nov 27, 2024
Malware in vs-table-plugins-antd
1 compromised version
- Nov 27, 2024
Malware in seller-webchat-build-sdk
1 compromised version
- Nov 27, 2024
Malware in seatalk-openapi
1 compromised version
- Nov 27, 2024
Malware in tbi-editor
1 compromised version
- Nov 27, 2024
Malware in spid-gc-ui-leaderboard
1 compromised version
- Nov 27, 2024
Malware in seller-core
1 compromised version
- Nov 27, 2024
Malware in shopee-pcs-ui
1 compromised version
- Nov 27, 2024
Malware in people-rn-common
1 compromised version
- Nov 27, 2024
Malware in react-big-calendar2
1 compromised version
- Nov 27, 2024
Malicious code in mystock-ui (npm)
1 compromised version
- Nov 27, 2024
Malicious code in item-card-sdk (npm)
1 compromised version
- Nov 27, 2024
Malware in marketing-eslint-check
1 compromised version
- Nov 27, 2024
Malware in item-card-sdk
1 compromised version
- Nov 27, 2024
Malware in export-pruner
1 compromised version
- Nov 27, 2024
Malware in mystock-ui
1 compromised version
- Nov 27, 2024
Malicious code in node-pyt (npm)
- Nov 27, 2024
Malicious code in chokader (npm)
1 compromised version
- Nov 27, 2024
Malware in node-pyt
1 compromised version
- Nov 27, 2024
Malware in chokader
1 compromised version
- Nov 27, 2024
Malicious code in streamserch (npm)
6 compromised versions
- Nov 27, 2024
Malicious code in sss2h (npm)
1 compromised version
- Nov 27, 2024
Malicious code in parimiko (npm)
- Nov 27, 2024
Malicious code in npmrunnall (npm)
1 compromised version
- Nov 27, 2024
Malicious code in babelcl (npm)
1 compromised version
- Nov 27, 2024
Malware in babelcl
1 compromised version
- Nov 27, 2024
Malware in streamserch
1 compromised version
- Nov 27, 2024
Malware in parimiko
1 compromised version
- Nov 27, 2024
Malware in npmrunnall
1 compromised version
- Nov 27, 2024
Malware in sss2h
1 compromised version
- Nov 27, 2024
Malicious code in web-framework-addons (npm)
2 compromised versions
- Nov 27, 2024
Malware in web-framework-addons
1 compromised version
- Nov 27, 2024
Malicious code in qassam22 (npm)
1 compromised version
- Nov 27, 2024
Malware in qassam22
1 compromised version
- Nov 27, 2024
Malware in docker-centos-hello
1 compromised version
Page 6497 of 7,308