Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Nov 27, 2024
Malicious code in testing-react-jsme (npm)
- Nov 27, 2024
Malware in aem-core-react-components
1 compromised version
- Nov 27, 2024
Malware in testing-react-jsme
1 compromised version
- Nov 27, 2024
Malicious code in sling-calendar-sdk (npm)
2 compromised versions
- Nov 27, 2024
Malware in sling-calendar-sdk
1 compromised version
- Nov 27, 2024
Malicious code in internallib_v605 (npm)
4 compromised versions
- Nov 27, 2024
Malware in internallib_v605
1 compromised version
- Nov 27, 2024
Malicious code in test-generator-plugin (npm)
1 compromised version
- Nov 27, 2024
Malware in shopee-ui
1 compromised version
- Nov 27, 2024
Malware in test-generator-plugin
1 compromised version
- Nov 27, 2024
Malware in seller-webchat-modules
1 compromised version
- Nov 27, 2024
Malware in web-chat-portal
1 compromised version
- Nov 27, 2024
Malware in spid-sharing-panel
1 compromised version
- Nov 27, 2024
Malware in seller-fulfillment-service
1 compromised version
- Nov 27, 2024
Malicious code in secure-fetch-utils-latest (npm)
1 compromised version
- Nov 27, 2024
Malicious code in people-web-log (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in node-prom-reporter (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in jira-rest-typescript (npm)
1 compromised version
- Nov 27, 2024
Malicious code in eslint-plugin-fulfillment-lint (npm)
3 compromised versions
- Nov 27, 2024
Malicious code in eslint-plugin-finance (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in eslint-plugin-classification-import (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in eslint-config-sipplint (npm)
1 compromised version
- Nov 27, 2024
Malicious code in eslint-config-sipp (npm)
1 compromised version
- Nov 27, 2024
Malicious code in eslint-config-loan (npm)
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-add-display-name
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-classification-import
1 compromised version
- Nov 27, 2024
Malware in eslint-config-finance-web-react
1 compromised version
- Nov 27, 2024
Malware in markomponent
1 compromised version
- Nov 27, 2024
Malware in secure-fetch-utils-latest
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-cognitive-complexity
1 compromised version
- Nov 27, 2024
Malware in people-web-log
1 compromised version
- Nov 27, 2024
Malware in eslint-config-loan
1 compromised version
- Nov 27, 2024
Malware in node-prom-reporter
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-foody-custom
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-finance
1 compromised version
- Nov 27, 2024
Malware in eslint-config-sipp
1 compromised version
- Nov 27, 2024
Malware in eslint-config-sipplint
1 compromised version
- Nov 27, 2024
Malware in jira-rest-typescript
1 compromised version
- Nov 27, 2024
Malware in retail-common
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-fulfillment-lint
1 compromised version
- Nov 27, 2024
Malware in react-dnd11
1 compromised version
- Nov 27, 2024
Malicious code in internallib_v268 (npm)
1 compromised version
- Nov 27, 2024
Malware in internallib_v268
1 compromised version
- Nov 27, 2024
Malicious code in yapi-plugin-games-google-login (npm)
1 compromised version
- Nov 27, 2024
Malware in viewercontext
1 compromised version
- Nov 27, 2024
Malware in yapi-plugin-games-google-login
1 compromised version
- Nov 27, 2024
Malicious code in ssc-user-guide-pro (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in seller-webchat-ui (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in rct-centered-text (npm)
1 compromised version
- Nov 27, 2024
Malicious code in multi-module-framework (npm)
2 compromised versions
Page 6498 of 7,308