Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Nov 16, 2024
Malicious code in seatalk-openapi (npm)
1 compromised version
- Nov 16, 2024
Malicious code in scm-retail-ui (npm)
1 compromised version
- Nov 16, 2024
Malicious code in scfe-joint-test-tool (npm)
1 compromised version
- Nov 16, 2024
Malicious code in sc-case-dispute (npm)
1 compromised version
- Nov 15, 2024
Malicious code in rollup-plugin-amd-output-enhance (npm)
1 compromised version
- Nov 15, 2024
Malicious code in rn-native-portals (npm)
1 compromised version
- Nov 15, 2024
Malicious code in rn-i18n-extensions (npm)
1 compromised version
- Nov 15, 2024
Malicious code in rich-text-slate-rc (npm)
1 compromised version
- Nov 15, 2024
Malicious code in retail-common (npm)
1 compromised version
- Nov 15, 2024
Malicious code in redux-store-immutable (npm)
1 compromised version
- Nov 15, 2024
Malicious code in realtime-translation-package (npm)
1 compromised version
- Nov 15, 2024
Malicious code in @fhnw/angular-app-configuration (npm)
2 compromised versions
- Nov 15, 2024
Malicious code in spirvls (npm)
2 compromised versions
- Nov 15, 2024
Malicious code in ffers (npm)
1 compromised version
- Nov 15, 2024
Malicious code in react-pro-components (npm)
1 compromised version
- Nov 15, 2024
Malicious code in react-is-16 (npm)
1 compromised version
- Nov 15, 2024
Malicious code in @freshworksinc/haxer (npm)
1 compromised version
- Nov 15, 2024
Malicious code in react-dnd11 (npm)
1 compromised version
- Nov 15, 2024
Malicious code in libpnpmpublish (npm)
1 compromised version
- Nov 15, 2024
Malicious code in evocateur_libpnpmpublish (npm)
1 compromised version
- Nov 15, 2024
Malicious code in evocateur_libpnpmpublisher (npm)
1 compromised version
- Nov 15, 2024
Malicious code in evocateur_libpnpmpublishing (npm)
1 compromised version
- Nov 15, 2024
Malicious code in evocater_libpnpmpublish (npm)
1 compromised version
- Nov 15, 2024
Malicious code in libnpmpublishing (npm)
1 compromised version
- Nov 15, 2024
Malicious code in libnpmpublisher (npm)
1 compromised version
- Nov 15, 2024
Malicious code in evocataur (npm)
1 compromised version
- Nov 15, 2024
Malicious code in newbharatv2 (npm)
1 compromised version
- Nov 15, 2024
Malicious code in newbharatv1 (npm)
2 compromised versions
- Nov 15, 2024
Malicious code in rct-calculator (npm)
1 compromised version
- Nov 15, 2024
Malicious code in quality-cli (npm)
1 compromised version
- Nov 15, 2024
Malicious code in erc4337 (npm)
2 compromised versions
- Nov 15, 2024
Malicious code in atlas-query-editor (npm)
6 compromised versions
- Nov 15, 2024
Malicious code in pvct-cli (npm)
1 compromised version
- Nov 15, 2024
Malicious code in aptos-mint (npm)
1 compromised version
- Nov 15, 2024
Malicious code in prettier-plugin-kimi-i18next (npm)
1 compromised version
- Nov 15, 2024
Malicious code in preact-cli-build (npm)
1 compromised version
- Nov 15, 2024
Malicious code in cb-cookie-manager (npm)
1 compromised version
- Nov 15, 2024
Malicious code in polaris-report (npm)
1 compromised version
- Nov 14, 2024
Malicious code in people-rn-common (npm)
1 compromised version
- Nov 14, 2024
Malicious code in @freshworksinc/platform-application (npm)
1 compromised version
- Nov 14, 2024
Malicious code in people-ats-common (npm)
1 compromised version
- Nov 14, 2024
Malicious code in reverse434343 (PyPI)
1 compromised version
- Nov 14, 2024
Malicious code in reverse4343 (PyPI)
1 compromised version
- Nov 14, 2024
Malicious code in eosio-signer (PyPI)
9 compromised versions
- Nov 14, 2024
Malicious code in pap-rn-sdk (npm)
1 compromised version
- Nov 14, 2024
Malicious code in opa-fe-base (npm)
1 compromised version
- Nov 14, 2024
Malicious code in oms-frontend (npm)
1 compromised version
- Nov 14, 2024
Malicious code in multi-module-plugins (npm)
1 compromised version
- Nov 14, 2024
Malicious code in module-json-validator (npm)
1 compromised version
- Nov 14, 2024
Malicious code in axios-mockadptr (npm)
Page 6506 of 7,308