Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Oct 30, 2024
Malicious code in opdistube (npm)
2 compromised versions
- Oct 30, 2024
Malicious code in upgrade-roblox (npm)
2 compromised versions
- Oct 30, 2024
Malicious code in testinbro (npm)
1 compromised version
- Oct 30, 2024
Malicious code in solaraupdater (npm)
1 compromised version
- Oct 30, 2024
Malicious code in robloxbootstrapper (npm)
1 compromised version
- Oct 30, 2024
Malicious code in ro.dll (npm)
1 compromised version
- Oct 30, 2024
Malicious code in nodelogic (npm)
1 compromised version
- Oct 30, 2024
Malicious code in nodelement (npm)
1 compromised version
- Oct 30, 2024
Malicious code in node-dlls (npm)
1 compromised version
- Oct 30, 2024
Malicious code in inject.dll (npm)
2 compromised versions
- Oct 30, 2024
Malicious code in easy-upgrade (npm)
1 compromised version
- Oct 30, 2024
Malicious code in celexkeygen (npm)
1 compromised version
- Oct 30, 2024
Malicious code in byfron (npm)
1 compromised version
- Oct 30, 2024
Malicious code in bloxupgrade (npm)
1 compromised version
- Oct 30, 2024
Malicious code in autoadv (npm)
1 compromised version
- Oct 30, 2024
Malicious code in @cb-global-design-system-tokens/tailwind (npm)
4 compromised versions
- Oct 30, 2024
Malicious code in @wf-wfria/ria-analytics (npm)
10 compromised versions
- Oct 30, 2024
Malicious code in test-package2345 (npm)
1 compromised version
- Oct 30, 2024
Malicious code in orb-sync-lib (npm)
4 compromised versions
- Oct 30, 2024
Malicious code in req-bans (npm)
1 compromised version
- Oct 30, 2024
Malware in req-bans
1 compromised version
- Oct 30, 2024
Malicious code in req-scopes (npm)
3 compromised versions
- Oct 30, 2024
Malware in req-scopes
1 compromised version
- Oct 30, 2024
Malicious code in xk6-toml (npm)
1 compromised version
- Oct 30, 2024
Malicious code in princedevmd1 (npm)
- Oct 30, 2024
Malicious code in lessc-rhino (npm)
1 compromised version
- Oct 30, 2024
Malware in lessc-rhino
1 compromised version
- Oct 30, 2024
Malware in princedevmd1
1 compromised version
- Oct 30, 2024
Malware in xk6-toml
1 compromised version
- Oct 30, 2024
Malicious code in react-native-blue-crypto (npm)
2 compromised versions
- Oct 30, 2024
Malware in react-native-blue-crypto
1 compromised version
- Oct 30, 2024
Malware in eslint-plugin-evo
1 compromised version
- Oct 30, 2024
Malicious code in se-testing (npm)
2 compromised versions
- Oct 30, 2024
Malicious code in eslint-config-ezugi (npm)
- Oct 30, 2024
Malware in roboter
1 compromised version
- Oct 30, 2024
Malware in eslint-config-ezugi
1 compromised version
- Oct 30, 2024
Malware in se-testing
1 compromised version
- Oct 29, 2024
Malicious code in herthtrhrt (npm)
- Oct 29, 2024
Malicious code in gerhtreger (npm)
1 compromised version
- Oct 29, 2024
Malware in herthtrhrt
1 compromised version
- Oct 29, 2024
Malware in gerhtreger
1 compromised version
- Oct 29, 2024
Malicious code in ui-tooltip (npm)
2 compromised versions
- Oct 29, 2024
Malicious code in custom-ui-extension-template (npm)
1 compromised version
- Oct 29, 2024
Malicious code in celtra-auto-exporter (npm)
1 compromised version
- Oct 29, 2024
Malicious code in dragonhack-workshop (npm)
1 compromised version
- Oct 29, 2024
Malicious code in webhooks-resources-nodejs-server (npm)
- Oct 29, 2024
Malicious code in plain-headless-portal (npm)
- Oct 29, 2024
Malicious code in kbc-ui.templates (npm)
1 compromised version
- Oct 29, 2024
Malware in webhooks-resources-nodejs-server
1 compromised version
- Oct 29, 2024
Malware in kbc-ui.templates
1 compromised version
Page 6521 of 7,308