Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Nov 14, 2024
Malware in axios-mockadptr
1 compromised version
- Nov 14, 2024
Malicious code in prxy-chain (npm)
- Nov 14, 2024
Malware in prxy-chain
1 compromised version
- Nov 14, 2024
Malicious code in wixdevpoc (npm)
1 compromised version
- Nov 14, 2024
Malicious code in commitlint-config-marketing (npm)
2 compromised versions
- Nov 14, 2024
Malicious code in commitlint-config-jira-type-infra (npm)
1 compromised version
- Nov 14, 2024
Malicious code in code-analysis-shopee-ui-for-scf (npm)
1 compromised version
- Nov 14, 2024
Malicious code in babel-plugin-transform-vuex-analysis (npm)
2 compromised versions
- Nov 14, 2024
Malicious code in babel-plugin-istanbul-shopee (npm)
2 compromised versions
- Nov 14, 2024
Malicious code in axios-older (npm)
1 compromised version
- Nov 14, 2024
Malware in chat-history-log-viewer
1 compromised version
- Nov 14, 2024
Malware in axios-older
1 compromised version
- Nov 14, 2024
Malware in babel-plugin-istanbul-shopee
1 compromised version
- Nov 14, 2024
Malware in case-dispute-common
1 compromised version
- Nov 14, 2024
Malware in babel-plugin-transform-vuex-analysis
1 compromised version
- Nov 14, 2024
Malware in commitlint-config-jira-type-infra
1 compromised version
- Nov 14, 2024
Malware in code-analysis-ts-for-sellercenter
1 compromised version
- Nov 14, 2024
Malware in appdynamics-zmq
1 compromised version
- Nov 14, 2024
Malware in babel-plugin-method-version
1 compromised version
- Nov 14, 2024
Malware in code-analysis-shopee-ui-for-scf
1 compromised version
- Nov 14, 2024
Malware in commitlint-config-marketing
1 compromised version
- Nov 14, 2024
Malware in appdynamics-protobuf
1 compromised version
- Nov 14, 2024
Malware in finsys-webcomponent
1 compromised version
- Nov 14, 2024
Malware in @gthwebdev/ui-tooltip
1 compromised version
- Nov 14, 2024
Malicious code in promotion-banner (npm)
2 compromised versions
- Nov 14, 2024
Malware in sc-meta-layer
1 compromised version
- Nov 14, 2024
Malware in appdynamics-native
1 compromised version
- Nov 14, 2024
Malware in appdynamics-libagent-napi
1 compromised version
- Nov 14, 2024
Malware in sc-pattern-library
1 compromised version
- Nov 14, 2024
Malware in sc-libraries
1 compromised version
- Nov 14, 2024
Malware in bridgetrack
1 compromised version
- Nov 14, 2024
Malware in promotion-banner
1 compromised version
- Nov 14, 2024
Malicious code in logjs4 (npm)
- Nov 14, 2024
Malware in logjs4
1 compromised version
- Nov 14, 2024
Malware in vpsnet-website
1 compromised version
- Nov 14, 2024
Malicious code in agn-base (npm)
- Nov 14, 2024
Malware in agn-base
1 compromised version
- Nov 14, 2024
Malicious code in mocktp (npm)
- Nov 14, 2024
Malware in mocktp
1 compromised version
- Nov 14, 2024
Malicious code in node-tunl (npm)
- Nov 14, 2024
Malware in node-tunl
1 compromised version
- Nov 14, 2024
Malicious code in h20-2 (npm)
- Nov 14, 2024
Malware in h20-2
1 compromised version
- Nov 14, 2024
Malicious code in ax-ntlm (npm)
- Nov 14, 2024
Malware in ax-ntlm
1 compromised version
- Nov 14, 2024
Malicious code in htp2 (npm)
- Nov 14, 2024
Malware in htp2
1 compromised version
- Nov 14, 2024
Malicious code in p-oauth2 (npm)
- Nov 14, 2024
Malware in p-oauth2
1 compromised version
- Nov 14, 2024
Malicious code in p-http (npm)
Page 6507 of 7,308