Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,337 total · sorted newest first- Oct 16, 2024
Malicious code in util-format-url (npm)
1 compromised version
- Oct 16, 2024
Malicious code in util-dynamodb (npm)
1 compromised version
- Oct 16, 2024
Malicious code in util-arn-parser (npm)
1 compromised version
- Oct 16, 2024
Malicious code in unwilling-emerald-bonobo (npm)
1 compromised version
- Oct 16, 2024
Malicious code in untoueire (npm)
1 compromised version
- Oct 16, 2024
Malicious code in unchanged-azure-limpet (npm)
1 compromised version
- Oct 16, 2024
Malicious code in uncertain-orange-snake (npm)
1 compromised version
- Oct 16, 2024
Malicious code in ui-datepicker-week-end (npm)
1 compromised version
- Oct 16, 2024
Malicious code in typescript52 (npm)
1 compromised version
- Oct 16, 2024
Malicious code in typescript-operations (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in translate-readme (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in to-lines (npm)
1 compromised version
- Oct 16, 2024
Malicious code in tioowur (npm)
1 compromised version
- Oct 16, 2024
Malicious code in thin-bronze-magpie (npm)
1 compromised version
- Oct 16, 2024
Malicious code in theme-one-dark (npm)
1 compromised version
- Oct 16, 2024
Malicious code in thefisherp (npm)
1 compromised version
- Oct 16, 2024
Malicious code in thefisheridx (npm)
1 compromised version
- Oct 16, 2024
Malicious code in testtest04 (npm)
1 compromised version
- Oct 16, 2024
Malicious code in testtest01 (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in test_lykos2 (npm)
1 compromised version
- Oct 16, 2024
Malicious code in test-tech-talk (npm)
1 compromised version
- Oct 16, 2024
Malicious code in temporary-beige-mandrill (npm)
1 compromised version
- Oct 16, 2024
Malicious code in symphony-scatterplot (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in swieuoer (npm)
1 compromised version
- Oct 16, 2024
Malicious code in surprising-amaranth-mastodon (npm)
1 compromised version
- Oct 16, 2024
Malicious code in super-aqua-canidae (npm)
1 compromised version
- Oct 16, 2024
Malicious code in supabase-js (npm)
4 compromised versions
- Oct 16, 2024
Malicious code in string-locale-compare (npm)
1 compromised version
- Oct 16, 2024
Malicious code in str-or-num (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in statistical-moccasin-caribou (npm)
1 compromised version
- Oct 16, 2024
Malicious code in ssr-dom-shim (npm)
1 compromised version
- Oct 16, 2024
Malicious code in ssc-oauth2 (npm)
1 compromised version
- Oct 16, 2024
Malicious code in squealing-green-coyote (npm)
1 compromised version
- Oct 16, 2024
Malicious code in square-red-puffin (npm)
1 compromised version
- Oct 16, 2024
Malicious code in spontaneous-plum-albatross (npm)
1 compromised version
- Oct 16, 2024
Malicious code in spiritual-magenta-cobra (npm)
1 compromised version
- Oct 16, 2024
Malicious code in spectrum-css-monorepo (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in soc-react-ui (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snp-react-scripts (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snp-react-scipts (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snp-design-system-charts (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snap-react-sctipts (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snap-react-scrpits (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snap-react-scritps (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snap-react-scripst (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snap-react-scrips (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snap-react-scipts (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snap-design-systm-charts (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snap-design-system-chrts (npm)
1 compromised version
- Oct 16, 2024
Malicious code in snap-design-system-charst (npm)
1 compromised version
Page 6530 of 7,307