Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Nov 27, 2024
Malicious code in isc-frontend (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in eslint-plugin-video (npm)
1 compromised version
- Nov 27, 2024
Malicious code in cmt-common (npm)
2 compromised versions
- Nov 27, 2024
Malware in ssc-user-guide-pro
1 compromised version
- Nov 27, 2024
Malware in scfe-joint-test-tool
1 compromised version
- Nov 27, 2024
Malware in isc-frontend
1 compromised version
- Nov 27, 2024
Malware in people-ats-common
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-video
1 compromised version
- Nov 27, 2024
Malware in seller-service
1 compromised version
- Nov 27, 2024
Malware in rct-centered-text
1 compromised version
- Nov 27, 2024
Malware in seller-center-puppeteer
1 compromised version
- Nov 27, 2024
Malware in cmt-common
1 compromised version
- Nov 27, 2024
Malware in spex-node-client
1 compromised version
- Nov 27, 2024
Malware in seller-webchat-ui
1 compromised version
- Nov 27, 2024
Malware in multi-module-framework
1 compromised version
- Nov 27, 2024
Malware in magic-umi-request
1 compromised version
- Nov 27, 2024
Malware in realtime-translation-package
1 compromised version
- Nov 27, 2024
Malicious code in wms-printer (npm)
- Nov 27, 2024
Malicious code in ssc-ui-vue-pro (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in seller-base.environment (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in scan-cli (npm)
2 compromised versions
- Nov 27, 2024
Malicious code in react-pro-components-next (npm)
1 compromised version
- Nov 27, 2024
Malicious code in rc-tabs-new (npm)
1 compromised version
- Nov 27, 2024
Malicious code in patch-package-lucky-video (npm)
1 compromised version
- Nov 27, 2024
Malicious code in monorepo-release-cli (npm)
2 compromised versions
- Nov 27, 2024
Malware in patch-package-lucky-video
1 compromised version
- Nov 27, 2024
Malware in s-page-legacy
1 compromised version
- Nov 27, 2024
Malware in react-pro-components-next
1 compromised version
- Nov 27, 2024
Malware in rc-tabs-new
1 compromised version
- Nov 27, 2024
Malware in monorepo-release-cli
1 compromised version
- Nov 27, 2024
Malware in seller-return-common
1 compromised version
- Nov 27, 2024
Malware in uss-vod-js-sdk
1 compromised version
- Nov 27, 2024
Malware in wms-printer
1 compromised version
- Nov 27, 2024
Malware in scan-cli
1 compromised version
- Nov 27, 2024
Malware in react-fatigue-dev
1 compromised version
- Nov 27, 2024
Malware in ssc-ui-vue-pro
1 compromised version
- Nov 27, 2024
Malware in listing-uss-sdk
1 compromised version
- Nov 27, 2024
Malware in seller-base.environment
1 compromised version
- Nov 27, 2024
Malware in careers-job-detail
1 compromised version
- Nov 27, 2024
Malware in eslint-plugin-ssc
1 compromised version
- Nov 27, 2024
Malware in hubot-hangouts
1 compromised version
- Nov 27, 2024
Malware in odin-security
1 compromised version
- Nov 27, 2024
Malware in sa11y-monorepo
1 compromised version
- Nov 27, 2024
Malicious code in refocus-logging (npm)
1 compromised version
- Nov 27, 2024
Malware in refocus-sgt-trust1
1 compromised version
- Nov 27, 2024
Malware in nordic-dev
1 compromised version
- Nov 27, 2024
Malware in refocus-real-time
1 compromised version
- Nov 27, 2024
Malware in akita-poc
1 compromised version
- Nov 27, 2024
Malware in refocus-logging
1 compromised version
- Nov 27, 2024
Malicious code in web_enhance_sap-stable (npm)
1 compromised version
Page 6499 of 7,308