Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Nov 13, 2024
Malicious code in @sportdigi/bootstrapper (npm)
18 compromised versions
- Nov 13, 2024
Malicious code in @ps-i18/i18-utils (npm)
3 compromised versions
- Nov 13, 2024
Malicious code in styledcomps (npm)
- Nov 13, 2024
Malware in styledcomps
1 compromised version
- Nov 13, 2024
Malicious code in sazz (npm)
- Nov 13, 2024
Malware in sazz
1 compromised version
- Nov 13, 2024
Malicious code in litecor-lib (npm)
- Nov 13, 2024
Malware in litecor-lib
1 compromised version
- Nov 13, 2024
Malicious code in waletconnect (npm)
- Nov 13, 2024
Malware in waletconnect
1 compromised version
- Nov 13, 2024
Malicious code in export-pruner (npm)
1 compromised version
- Nov 13, 2024
Malicious code in hackerone000001 (npm)
1 compromised version
- Nov 13, 2024
Malicious code in hodkasia01 (npm)
1 compromised version
- Nov 13, 2024
Malicious code in eslint-plugin-wms (npm)
1 compromised version
- Nov 13, 2024
Malicious code in sixsense (npm)
1 compromised version
- Nov 13, 2024
Malicious code in ansishade (PyPI)
1 compromised version
- Nov 13, 2024
Malicious code in tingetone (PyPI)
2 compromised versions
- Nov 13, 2024
Malicious code in eslint-plugin-unusedvar-fix (npm)
1 compromised version
- Nov 13, 2024
Malicious code in eslint-plugin-ssc (npm)
1 compromised version
- Nov 13, 2024
Malicious code in eslint-plugin-shopee (npm)
1 compromised version
- Nov 13, 2024
Malicious code in eslint-plugin-module-dependencies (npm)
1 compromised version
- Nov 13, 2024
Malicious code in eslint-plugin-mark-i18n (npm)
1 compromised version
- Nov 13, 2024
Malicious code in eslint-plugin-internal-playwright (npm)
1 compromised version
- Nov 13, 2024
Malicious code in eslint-plugin-foody-custom (npm)
1 compromised version
- Nov 12, 2024
Malicious code in docker-centos-hello (npm)
1 compromised version
- Nov 12, 2024
Malicious code in bitcor-mnemonic (npm)
- Nov 12, 2024
Malware in bitcor-mnemonic
1 compromised version
- Nov 12, 2024
Malicious code in bitcore-mnemic (npm)
- Nov 12, 2024
Malware in bitcore-mnemic
1 compromised version
- Nov 12, 2024
Malicious code in bitcore-mnemoic (npm)
- Nov 12, 2024
Malware in bitcore-mnemoic
1 compromised version
- Nov 12, 2024
Malicious code in bitcore-walet (npm)
- Nov 12, 2024
Malware in bitcore-walet
1 compromised version
- Nov 12, 2024
Malicious code in wavs-api (npm)
- Nov 12, 2024
Malware in wavs-api
1 compromised version
- Nov 12, 2024
Malicious code in monro (npm)
- Nov 12, 2024
Malware in monro
1 compromised version
- Nov 12, 2024
Malicious code in blockypher (npm)
- Nov 12, 2024
Malware in blockypher
1 compromised version
- Nov 12, 2024
Malicious code in chanlink (npm)
- Nov 12, 2024
Malware in chanlink
1 compromised version
- Nov 12, 2024
Malicious code in coinbse (npm)
- Nov 12, 2024
Malware in coinbse
1 compromised version
- Nov 12, 2024
Malicious code in web-sol-checker (npm)
- Nov 12, 2024
Malware in web-sol-checker
1 compromised version
- Nov 12, 2024
Malicious code in web3-sol-checker (npm)
- Nov 12, 2024
Malware in web3-sol-checker
1 compromised version
- Nov 12, 2024
Malicious code in @david-lab/evm-lib (npm)
- Nov 12, 2024
Malware in @david-lab/evm-lib
1 compromised version
- Nov 12, 2024
Malicious code in @david-lab/sol-lib (npm)
Page 6509 of 7,308