Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,337 total · sorted newest first- Oct 14, 2024
Malware in redis-oracle
1 compromised version
- Oct 14, 2024
Malicious code in dmall (npm)
- Oct 14, 2024
Malicious code in discord.jselfbot-v13 (npm)
- Oct 14, 2024
Malicious code in discord.js-dmall (npm)
- Oct 14, 2024
Malware in discord.js-dmall
1 compromised version
- Oct 14, 2024
Malware in dmall
1 compromised version
- Oct 14, 2024
Malware in discord.jselfbot-v13
1 compromised version
- Oct 14, 2024
Malicious code in module-grab (npm)
- Oct 14, 2024
Malware in module-grab
1 compromised version
- Oct 13, 2024
Malicious code in hdhh.hiijack (npm)
1 compromised version
- Oct 13, 2024
Malicious code in robloxrequestsss (PyPI)
1 compromised version
- Oct 13, 2024
Malicious code in discordmessager (PyPI)
3 compromised versions
- Oct 13, 2024
Malicious code in splunk-docs (npm)
1 compromised version
- Oct 12, 2024
Malicious code in timeline-airtable (npm)
7 compromised versions
- Oct 12, 2024
Malicious code in mmpp (npm)
2 compromised versions
- Oct 12, 2024
Malicious code in huggingface-vscode (npm)
1 compromised version
- Oct 12, 2024
Malicious code in test-automation-testing (npm)
3 compromised versions
- Oct 12, 2024
Malicious code in native-module2 (npm)
1 compromised version
- Oct 12, 2024
Malicious code in firebase-rc-monitor (npm)
1 compromised version
- Oct 11, 2024
Malicious code in @client-innovation/librct (npm)
1 compromised version
- Oct 11, 2024
Malicious code in rei-browser-shim (npm)
2 compromised versions
- Oct 11, 2024
Malware in papercut-ui
1 compromised version
- Oct 11, 2024
Malicious code in o-typography (npm)
3 compromised versions
- Oct 11, 2024
Malware in o-typography
1 compromised version
- Oct 11, 2024
Malware in evolve-base-assets
1 compromised version
- Oct 11, 2024
Malicious code in ts-jest-starter-kit (npm)
- Oct 11, 2024
Malware in intercom-openapi
1 compromised version
- Oct 11, 2024
Malware in ts-jest-starter-kit
1 compromised version
- Oct 11, 2024
Malware in ember-deep-addon
1 compromised version
- Oct 11, 2024
Malware in worldpay-raft-connect
1 compromised version
- Oct 11, 2024
Malware in ds-home
1 compromised version
- Oct 11, 2024
Malicious code in mallutrojan1002 (npm)
- Oct 11, 2024
Malware in mallutrojan1002
1 compromised version
- Oct 11, 2024
Malware in assistants-nextjs
1 compromised version
- Oct 11, 2024
Malware in neuron-viewer
1 compromised version
- Oct 11, 2024
Malicious code in opti-distube (npm)
3 compromised versions
- Oct 11, 2024
Malware in opti-distube
1 compromised version
- Oct 11, 2024
Malicious code in gcp-monitor-prod (npm)
2 compromised versions
- Oct 11, 2024
Malicious code in cbdev2024test (npm)
14 compromised versions
- Oct 11, 2024
Malware in cbdev2024test
1 compromised version
- Oct 11, 2024
Malware in gcp-monitor-prod
1 compromised version
- Oct 11, 2024
Malicious code in request-ip-validator (npm)
- Oct 11, 2024
Malicious code in request-ip-check (npm)
6 compromised versions
- Oct 11, 2024
Malware in request-ip-check
1 compromised version
- Oct 11, 2024
Malware in request-ip-validator
1 compromised version
- Oct 10, 2024
Malicious code in pt-validate (npm)
60 compromised versions
- Oct 10, 2024
Malware in pt-validate
1 compromised version
- Oct 10, 2024
Malicious code in todomvc-app-css-alt (npm)
- Oct 10, 2024
Malware in todomvc-app-css-alt
1 compromised version
- Oct 10, 2024
Malware in sd-template-main
1 compromised version
Page 6539 of 7,307