Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Nov 20, 2024
Malicious code in dapp-test-runner (npm)
1 compromised version
- Nov 20, 2024
Malicious code in cljs-dopeloop (npm)
1 compromised version
- Nov 20, 2024
Malicious code in camera-kit-react-native-example (npm)
2 compromised versions
- Nov 19, 2024
Malicious code in mona-service (npm)
1 compromised version
- Nov 19, 2024
Malicious code in mona-runtime (npm)
1 compromised version
- Nov 19, 2024
Malicious code in mona-client-mini (npm)
1 compromised version
- Nov 18, 2024
Malicious code in tautoak4-hello-world (npm)
1 compromised version
- Nov 18, 2024
Malicious code in tautoake4-hello-world (npm)
1 compromised version
- Nov 18, 2024
Malicious code in take2-hello-world (npm)
1 compromised version
- Nov 18, 2024
Malicious code in take3-hello-world (npm)
1 compromised version
- Nov 18, 2024
Malicious code in odin-security (npm)
5 compromised versions
- Nov 17, 2024
Malicious code in random-security-test-pkg (PyPI)
2 compromised versions
- Nov 17, 2024
Malicious code in instacart-roulette-daemon-client (PyPI)
2 compromised versions
- Nov 17, 2024
Malicious code in import-path-rewrite (npm)
2 compromised versions
- Nov 17, 2024
Malicious code in galaktika-components (npm)
1 compromised version
- Nov 17, 2024
Malicious code in ovh_sentry (npm)
1 compromised version
- Nov 17, 2024
Malicious code in theme-webpack (npm)
1 compromised version
- Nov 17, 2024
Malicious code in shopee-dashjs (npm)
1 compromised version
- Nov 17, 2024
Malicious code in seller-webchat-utils (npm)
1 compromised version
- Nov 16, 2024
Malicious code in zebo (PyPI)
1 compromised version
- Nov 16, 2024
Malicious code in pycalculater (PyPI)
1 compromised version
- Nov 16, 2024
Malicious code in discconnect (PyPI)
4 compromised versions
- Nov 16, 2024
Malicious code in cdh-data-portal-theme (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-webchat-modules (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-webchat-common (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-vuex-report-plugin (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-service (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-rn-mng-lib (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-return-common (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-pure-component (npm)
1 compromised version
- Nov 16, 2024
Malicious code in alex_evil-test-package (npm)
4 compromised versions
- Nov 16, 2024
Malicious code in seller-payment-service (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-package-common (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-node-logger (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-listing-rn-lib (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-listing-common (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-fulfillment-service (npm)
1 compromised version
- Nov 16, 2024
Malicious code in odyssey-storybook (npm)
3 compromised versions
- Nov 16, 2024
Malicious code in seller-fulfillment-common (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-core (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-common (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-center-puppeteer (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-base.preview (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-base (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-assistance-service (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-assistance-common (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-admin-common (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seller-address-common (npm)
1 compromised version
- Nov 16, 2024
Malicious code in seatalk-protocol (npm)
1 compromised version
- Nov 16, 2024
Malicious code in galaktika-components-test (npm)
3 compromised versions
Page 6505 of 7,308