Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Nov 26, 2024
Malware in icf-react-components
1 compromised version
- Nov 26, 2024
Malicious code in hacker_for_pastebin (npm)
2 compromised versions
- Nov 26, 2024
Malware in hacker_for_pastebin
1 compromised version
- Nov 26, 2024
Malicious code in crypt-research (npm)
4 compromised versions
- Nov 26, 2024
Malware in crypt-research
1 compromised version
- Nov 26, 2024
Malicious code in cfc-i18n (npm)
1 compromised version
- Nov 26, 2024
Malware in cfc-i18n
1 compromised version
- Nov 25, 2024
Malicious code in clement-malicious-npm-package-1 (npm)
- Nov 25, 2024
Malware in clement-malicious-npm-package-1
1 compromised version
- Nov 25, 2024
Malicious code in thre-js (npm)
- Nov 25, 2024
Malware in thre-js
1 compromised version
- Nov 25, 2024
Malicious code in tetther (npm)
- Nov 25, 2024
Malware in tetther
1 compromised version
- Nov 25, 2024
Malicious code in tetherr (npm)
- Nov 25, 2024
Malware in tetherr
1 compromised version
- Nov 25, 2024
Malicious code in tehter (npm)
- Nov 25, 2024
Malware in tehter
1 compromised version
- Nov 25, 2024
Malicious code in nodmialer (npm)
- Nov 25, 2024
Malware in nodmialer
1 compromised version
- Nov 25, 2024
Malicious code in nodmailr (npm)
- Nov 25, 2024
Malware in nodmailr
1 compromised version
- Nov 25, 2024
Malicious code in neextjs (npm)
- Nov 25, 2024
Malware in neextjs
1 compromised version
- Nov 25, 2024
Malicious code in lito-core-lib (npm)
- Nov 25, 2024
Malware in lito-core-lib
1 compromised version
- Nov 25, 2024
Malicious code in litcore (npm)
- Nov 25, 2024
Malware in litcore
1 compromised version
- Nov 25, 2024
Malicious code in libbtc (npm)
- Nov 25, 2024
Malware in libbtc
1 compromised version
- Nov 25, 2024
Malicious code in testsdsdsdsd (npm)
1 compromised version
- Nov 25, 2024
Malicious code in eslint-config-video-supply (npm)
2 compromised versions
- Nov 25, 2024
Malware in eslint-config-video-supply
1 compromised version
- Nov 25, 2024
Malware in ksjdksdks
1 compromised version
- Nov 25, 2024
Malware in testsdsdsdsd
1 compromised version
- Nov 25, 2024
Malicious code in electurm (npm)
- Nov 25, 2024
Malware in electurm
1 compromised version
- Nov 25, 2024
Malicious code in elctrum (npm)
- Nov 25, 2024
Malware in elctrum
1 compromised version
- Nov 25, 2024
Malicious code in symphony-markdown (npm)
1 compromised version
- Nov 25, 2024
Malicious code in aries-bifold-root (npm)
1 compromised version
- Nov 25, 2024
Malicious code in rc-network (npm)
3 compromised versions
- Nov 25, 2024
Malicious code in cloud-functions-schedule-instance (npm)
2 compromised versions
- Nov 25, 2024
Malicious code in node-commerce-web (npm)
1 compromised version
- Nov 25, 2024
Malicious code in crypto-puch (npm)
- Nov 25, 2024
Malware in crypto-puch
1 compromised version
- Nov 25, 2024
Malicious code in conibase (npm)
- Nov 25, 2024
Malware in conibase
1 compromised version
- Nov 25, 2024
Malicious code in bcoi (npm)
- Nov 25, 2024
Malware in bcoi
1 compromised version
- Nov 25, 2024
Malicious code in web3bz (npm)
Page 6502 of 7,308