Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,337 total · sorted newest first- Oct 16, 2024
Malicious code in cli-linux-x64 (npm)
1 compromised version
- Oct 16, 2024
Malicious code in cli-doctor (npm)
1 compromised version
- Oct 16, 2024
Malicious code in cli-ctor (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in claticles (npm)
1 compromised version
- Oct 16, 2024
Malicious code in ckeditor5-table (npm)
1 compromised version
- Oct 16, 2024
Malicious code in ckeditor5-cloud-services (npm)
1 compromised version
- Oct 16, 2024
Malicious code in ckeditor5-block-quote (npm)
1 compromised version
- Oct 16, 2024
Malicious code in ckeditor5-alignment (npm)
1 compromised version
- Oct 16, 2024
Malicious code in ciomiojui (npm)
1 compromised version
- Oct 16, 2024
Malicious code in chunked-blob-reader-native (npm)
1 compromised version
- Oct 16, 2024
Malicious code in cheerful-emerald-pig (npm)
1 compromised version
- Oct 16, 2024
Malicious code in censhare-web (npm)
1 compromised version
- Oct 16, 2024
Malicious code in careful-scarlet-cattle (npm)
1 compromised version
- Oct 16, 2024
Malicious code in bundled-angular-compiler (npm)
1 compromised version
- Oct 16, 2024
Malicious code in builder-vite (npm)
1 compromised version
- Oct 16, 2024
Malicious code in builder-manager (npm)
1 compromised version
- Oct 16, 2024
Malicious code in bsuwoeuo (npm)
1 compromised version
- Oct 16, 2024
Malicious code in bsowuier (npm)
1 compromised version
- Oct 16, 2024
Malicious code in bsjueior (npm)
1 compromised version
- Oct 16, 2024
Malicious code in bruteforcesettings (npm)
1 compromised version
- Oct 16, 2024
Malicious code in boring-amethyst-sheep (npm)
1 compromised version
- Oct 16, 2024
Malicious code in boolean-point-in-polygon (npm)
1 compromised version
- Oct 16, 2024
Malicious code in bnppf-font-icons (npm)
16 compromised versions
- Oct 16, 2024
Malicious code in bkdevportal (npm)
1 compromised version
- Oct 16, 2024
Malicious code in biwjhsue (npm)
1 compromised version
- Oct 16, 2024
Malicious code in biutyiops (npm)
1 compromised version
- Oct 16, 2024
Malicious code in binding-rose-ox (npm)
1 compromised version
- Oct 16, 2024
Malicious code in big-blush-anglerfish (npm)
1 compromised version
- Oct 16, 2024
Malicious code in awueord (npm)
1 compromised version
- Oct 16, 2024
Malicious code in aws-crypto (npm)
3 compromised versions
- Oct 16, 2024
Malicious code in available-coral-possum (npm)
1 compromised version
- Oct 16, 2024
Malicious code in autogen_studio (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in auto-instrumentations-node (npm)
1 compromised version
- Oct 16, 2024
Malicious code in auth0-lock-browserify (npm)
1 compromised version
- Oct 16, 2024
Malicious code in auth-oauth-device (npm)
1 compromised version
- Oct 16, 2024
Malicious code in atlassian-static-assets-url-plugin (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in atlassian-oauth2-plugin (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in aswieos (npm)
1 compromised version
- Oct 16, 2024
Malicious code in assets-registry (npm)
1 compromised version
- Oct 16, 2024
Malicious code in assetiq-kudu-node (npm)
1 compromised version
- Oct 16, 2024
Malicious code in aspernatur-pariatur-occaecati (npm)
1 compromised version
- Oct 16, 2024
Malicious code in apidevtools (npm)
1 compromised version
- Oct 16, 2024
Malicious code in api-extractor-model (npm)
1 compromised version
- Oct 16, 2024
Malicious code in nuxtjs_axios (npm)
1 compromised version
- Oct 16, 2024
Malicious code in android-x64 (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in android-arm64 (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in android-arm (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in alexablueprintswizard (npm)
4 compromised versions
- Oct 16, 2024
Malicious code in aix-ppc64 (npm)
1 compromised version
- Oct 16, 2024
Malicious code in ahmedwael00 (npm)
1 compromised version
Page 6537 of 7,307