Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,337 total · sorted newest first- Oct 16, 2024
Malicious code in elements-homefeeds (npm)
1 compromised version
- Oct 16, 2024
Malicious code in elastic-otel-node (npm)
1 compromised version
- Oct 16, 2024
Malicious code in eighster (npm)
1 compromised version
- Oct 16, 2024
Malicious code in dying-beige-gazelle (npm)
1 compromised version
- Oct 16, 2024
Malicious code in dwoeoer (npm)
1 compromised version
- Oct 16, 2024
Malicious code in dt-app112 (npm)
1 compromised version
- Oct 16, 2024
Malicious code in dp-bpsc-tiktok-music (npm)
1 compromised version
- Oct 16, 2024
Malicious code in dominant-sapphire-dolphin (npm)
1 compromised version
- Oct 16, 2024
Malicious code in do-not-install-ecb1029ca (npm)
1 compromised version
- Oct 16, 2024
Malicious code in djs14-logger (npm)
3 compromised versions
- Oct 16, 2024
Malicious code in directlinetoactionsongooglelib (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in dhoeiwoe (npm)
1 compromised version
- Oct 16, 2024
Malicious code in dfx-api (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in dependent-maroon-bovid (npm)
1 compromised version
- Oct 16, 2024
Malicious code in dep_malc (npm)
1 compromised version
- Oct 16, 2024
Malicious code in deeperscan-nft (npm)
1 compromised version
- Oct 16, 2024
Malicious code in decisive-salmon-worm (npm)
1 compromised version
- Oct 16, 2024
Malicious code in cwoeuor (npm)
1 compromised version
- Oct 16, 2024
Malicious code in css-tokenizer (npm)
1 compromised version
- Oct 16, 2024
Malicious code in crowdin-cli-website (npm)
1 compromised version
- Oct 16, 2024
Malicious code in crispler (npm)
1 compromised version
- Oct 16, 2024
Malicious code in crisping (npm)
1 compromised version
- Oct 16, 2024
Malicious code in credential-provider-http (npm)
1 compromised version
- Oct 16, 2024
Malicious code in corporate-pro (npm)
1 compromised version
- Oct 16, 2024
Malicious code in core-linux-x64-musl (npm)
1 compromised version
- Oct 16, 2024
Malicious code in context-async-hooks (npm)
1 compromised version
- Oct 16, 2024
Malicious code in conservation-pink-armadillo (npm)
1 compromised version
- Oct 16, 2024
Malicious code in confluence-search-ui (npm)
1 compromised version
- Oct 16, 2024
Malicious code in confluence-frontend (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in config.env-replace (npm)
1 compromised version
- Oct 16, 2024
Malicious code in config-conventional (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in compulsory-harlequin-ant (npm)
1 compromised version
- Oct 16, 2024
Malicious code in competent-violet-dolphin (npm)
1 compromised version
- Oct 16, 2024
Malicious code in comparable-scarlet-perch (npm)
1 compromised version
- Oct 16, 2024
Malicious code in com.microsoft.mrtk.graphicstools.unity (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in coinbase-smart-wallet-documentation (npm)
1 compromised version
- Oct 16, 2024
Malicious code in code-file-loader (npm)
1 compromised version
- Oct 16, 2024
Malicious code in clumsy-olive-goldfish (npm)
1 compromised version
- Oct 16, 2024
Malicious code in closed-salmon-harrier (npm)
1 compromised version
- Oct 16, 2024
Malicious code in cliwoerr (npm)
1 compromised version
- Oct 16, 2024
Malicious code in client-sns (npm)
1 compromised version
- Oct 16, 2024
Malicious code in client-sfn (npm)
1 compromised version
- Oct 16, 2024
Malicious code in client-ses (npm)
1 compromised version
- Oct 16, 2024
Malicious code in client-s3 (npm)
3 compromised versions
- Oct 16, 2024
Malicious code in client-lambda (npm)
1 compromised version
- Oct 16, 2024
Malicious code in client-iam (npm)
1 compromised version
- Oct 16, 2024
Malicious code in client-eventbridge (npm)
1 compromised version
- Oct 16, 2024
Malicious code in client-dynamodb (npm)
1 compromised version
- Oct 16, 2024
Malicious code in client-cognito-identity-provider (npm)
1 compromised version
- Oct 16, 2024
Malicious code in client-cloudwatch-logs (npm)
1 compromised version
Page 6536 of 7,307