Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Nov 25, 2024
Malware in web3bz
1 compromised version
- Nov 25, 2024
Malicious code in web-bz (npm)
- Nov 25, 2024
Malware in web-bz
1 compromised version
- Nov 25, 2024
Malicious code in ethtok (npm)
- Nov 25, 2024
Malware in ethtok
1 compromised version
- Nov 25, 2024
Malicious code in ethquer (npm)
- Nov 25, 2024
Malware in ethquer
1 compromised version
- Nov 25, 2024
Malicious code in ethcrypro (npm)
- Nov 25, 2024
Malware in ethcrypro
1 compromised version
- Nov 25, 2024
Malicious code in eth-crpto (npm)
- Nov 25, 2024
Malware in eth-crpto
1 compromised version
- Nov 25, 2024
Malicious code in etcrypto (npm)
- Nov 25, 2024
Malware in etcrypto
1 compromised version
- Nov 25, 2024
Malicious code in bigumner-js (npm)
- Nov 25, 2024
Malware in bigumner-js
1 compromised version
- Nov 25, 2024
Malicious code in bignum.js (npm)
- Nov 25, 2024
Malware in bignum.js
1 compromised version
- Nov 25, 2024
Malware in @amagioss/js-timecode
1 compromised version
- Nov 25, 2024
Malicious code in rana-media-downloader (npm)
- Nov 25, 2024
Malware in rana-media-downloader
1 compromised version
- Nov 25, 2024
Malicious code in imon-media-downloader (npm)
- Nov 25, 2024
Malware in imon-media-downloader
1 compromised version
- Nov 25, 2024
Malicious code in dl-testes (npm)
- Nov 25, 2024
Malicious code in delta-test (npm)
- Nov 25, 2024
Malicious code in delta-downloader (npm)
- Nov 25, 2024
Malware in delta-test
1 compromised version
- Nov 25, 2024
Malware in dl-testes
1 compromised version
- Nov 25, 2024
Malware in delta-downloader
1 compromised version
- Nov 25, 2024
Malicious code in alif-media-downloader (npm)
- Nov 25, 2024
Malware in alif-media-downloader
1 compromised version
- Nov 25, 2024
Malicious code in fixsolara (npm)
23 compromised versions
- Nov 25, 2024
Malware in fixsolara
1 compromised version
- Nov 25, 2024
Malicious code in solarafix (npm)
5 compromised versions
- Nov 25, 2024
Malicious code in rootkitfix (npm)
1 compromised version
- Nov 25, 2024
Malware in rootkitfix
1 compromised version
- Nov 25, 2024
Malware in solarafix
1 compromised version
- Nov 25, 2024
Malicious code in clarity-lsp (npm)
1 compromised version
- Nov 24, 2024
Malicious code in clarity-vs-code-web-client (npm)
1 compromised version
- Nov 24, 2024
Malicious code in lunar-root (npm)
1 compromised version
- Nov 24, 2024
Malicious code in generate-release-description (npm)
1 compromised version
- Nov 24, 2024
Malicious code in d1-northwind (npm)
1 compromised version
- Nov 24, 2024
Malicious code in veworld-mock (npm)
1 compromised version
- Nov 24, 2024
Malicious code in eth-based-p2p-e2e-latency (npm)
1 compromised version
- Nov 24, 2024
Malicious code in canvaskit-local (npm)
1 compromised version
- Nov 24, 2024
Malicious code in quorumnetworktester (npm)
1 compromised version
- Nov 24, 2024
Malicious code in nylas-private-fonts (npm)
1 compromised version
- Nov 24, 2024
Malicious code in nylas-private-sounds (npm)
1 compromised version
- Nov 24, 2024
Malicious code in jigasi-haproxy-agent (npm)
1 compromised version
- Nov 24, 2024
Malicious code in plaid-tiny-quickstart (npm)
1 compromised version
- Nov 24, 2024
Malicious code in dashlane-vscode (npm)
1 compromised version
Page 6503 of 7,308