Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Nov 5, 2024
Malicious code in emtoolsjs (npm)
1 compromised version
- Nov 5, 2024
Malicious code in api-cache-worker (npm)
1 compromised version
- Nov 5, 2024
Malicious code in apc-protobuf (npm)
1 compromised version
- Nov 5, 2024
Malicious code in apc-official-icon (npm)
1 compromised version
- Nov 5, 2024
Malicious code in apa-components (npm)
1 compromised version
- Nov 5, 2024
Malicious code in osm-legal-speed (npm)
1 compromised version
- Nov 5, 2024
Malicious code in team-plain (npm)
1 compromised version
- Nov 5, 2024
Malicious code in @isfe-common/testing-utils (npm)
1 compromised version
- Nov 5, 2024
Malicious code in pupeteerreqintercepter (npm)
- Nov 5, 2024
Malware in pupeteerreqintercepter
1 compromised version
- Nov 5, 2024
Malicious code in puppeteerrequestinterceptor (npm)
- Nov 5, 2024
Malware in puppeteerrequestinterceptor
1 compromised version
- Nov 5, 2024
Malicious code in @isfe-common/testing-constants (npm)
1 compromised version
- Nov 5, 2024
Malicious code in pupeteerscreenrecordr (npm)
- Nov 5, 2024
Malware in pupeteerscreenrecordr
1 compromised version
- Nov 5, 2024
Malicious code in @maps-bc/i18n (npm)
1 compromised version
- Nov 5, 2024
Malicious code in pupeteer-screen-recorder (npm)
- Nov 5, 2024
Malware in pupeteer-screen-recorder
1 compromised version
- Nov 5, 2024
Malicious code in pupeteer-har (npm)
- Nov 5, 2024
Malware in pupeteer-har
1 compromised version
- Nov 5, 2024
Malicious code in pupeteer-recorder (npm)
- Nov 5, 2024
Malware in pupeteer-recorder
1 compromised version
- Nov 5, 2024
Malicious code in pupeteer-page-proxy (npm)
- Nov 5, 2024
Malware in pupeteer-page-proxy
1 compromised version
- Nov 5, 2024
Malicious code in puppeteerextraadblocker (npm)
- Nov 5, 2024
Malware in puppeteerextraadblocker
1 compromised version
- Nov 5, 2024
Malicious code in @maps-bc/runtime (npm)
1 compromised version
- Nov 5, 2024
Malicious code in puppeteercluser (npm)
- Nov 5, 2024
Malware in puppeteercluser
1 compromised version
- Nov 5, 2024
Malicious code in puppeteer-harr (npm)
- Nov 5, 2024
Malware in puppeteer-harr
1 compromised version
- Nov 5, 2024
Malicious code in pupeteer-cluster (npm)
- Nov 5, 2024
Malware in pupeteer-cluster
1 compromised version
- Nov 5, 2024
Malicious code in puppeteer-extra-plugin-adblokcer (npm)
- Nov 5, 2024
Malware in puppeteer-extra-plugin-adblokcer
1 compromised version
- Nov 5, 2024
Malicious code in pupetier (npm)
- Nov 5, 2024
Malware in pupetier
1 compromised version
- Nov 5, 2024
Malicious code in pupeter (npm)
- Nov 5, 2024
Malware in pupeter
1 compromised version
- Nov 5, 2024
Malicious code in zalf22ausi8 (npm)
- Nov 5, 2024
Malware in zalf22ausi8
1 compromised version
- Nov 5, 2024
Malicious code in daun124wdsa8 (npm)
- Nov 5, 2024
Malware in daun124wdsa8
1 compromised version
- Nov 5, 2024
Malicious code in zalfausi8 (npm)
- Nov 5, 2024
Malware in zalfausi8
1 compromised version
- Nov 5, 2024
Malicious code in @common-pattern/components (npm)
1 compromised version
- Nov 5, 2024
Malicious code in bytesap (PyPI)
1 compromised version
- Nov 5, 2024
Malicious code in byteseep (PyPI)
1 compromised version
- Nov 5, 2024
Malicious code in bytesip (PyPI)
1 compromised version
- Nov 5, 2024
Malicious code in nuest (PyPI)
1 compromised version
Page 6518 of 7,308