Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,337 total · sorted newest first- Oct 10, 2024
Malware in monorepo-releaser
1 compromised version
- Oct 10, 2024
Malware in interactive-app
1 compromised version
- Oct 10, 2024
Malicious code in wassup-shiva (npm)
4 compromised versions
- Oct 10, 2024
Malicious code in helri-shiv (npm)
- Oct 10, 2024
Malware in helri-shiv
1 compromised version
- Oct 10, 2024
Malware in wassup-shiva
1 compromised version
- Oct 9, 2024
Malicious code in shmam-test-npm-test-5 (npm)
- Oct 9, 2024
Malware in shmam-test-npm-test-5
1 compromised version
- Oct 9, 2024
Malicious code in extrafee (npm)
1 compromised version
- Oct 9, 2024
Malicious code in customer-feedback-widget (npm)
1 compromised version
- Oct 9, 2024
Malware in o-typescript
1 compromised version
- Oct 9, 2024
Malware in m-typescript
1 compromised version
- Oct 9, 2024
Malware in no-typescript
1 compromised version
- Oct 9, 2024
Malware in fccui
1 compromised version
- Oct 9, 2024
Malware in reference-implementation
1 compromised version
- Oct 9, 2024
Malware in deferred-initialization
1 compromised version
- Oct 9, 2024
Malware in app-monorepo
1 compromised version
- Oct 9, 2024
Malicious code in blockscan-api (npm)
- Oct 9, 2024
Malware in blockscan-api
1 compromised version
- Oct 9, 2024
Malicious code in yayt09 (npm)
- Oct 9, 2024
Malicious code in y4wcqg (npm)
- Oct 9, 2024
Malicious code in tmjadd (npm)
- Oct 9, 2024
Malicious code in svuv9u (npm)
- Oct 9, 2024
Malicious code in oipmbq (npm)
- Oct 9, 2024
Malicious code in jzcgnt (npm)
- Oct 9, 2024
Malicious code in d40tmf (npm)
- Oct 9, 2024
Malicious code in bcsgb0 (npm)
- Oct 9, 2024
Malicious code in agquu6 (npm)
- Oct 9, 2024
Malicious code in a0npiv (npm)
- Oct 9, 2024
Malicious code in 29ge1l (npm)
- Oct 9, 2024
Malicious code in 1nzcej (npm)
- Oct 9, 2024
Malicious code in 04axvm (npm)
- Oct 9, 2024
Malware in oipmbq
1 compromised version
- Oct 9, 2024
Malware in tmjadd
1 compromised version
- Oct 9, 2024
Malware in yayt09
1 compromised version
- Oct 9, 2024
Malware in a0npiv
1 compromised version
- Oct 9, 2024
Malware in jzcgnt
1 compromised version
- Oct 9, 2024
Malware in y4wcqg
1 compromised version
- Oct 9, 2024
Malware in 29ge1l
1 compromised version
- Oct 9, 2024
Malware in d40tmf
1 compromised version
- Oct 9, 2024
Malware in bcsgb0
1 compromised version
- Oct 9, 2024
Malware in 04axvm
1 compromised version
- Oct 9, 2024
Malware in agquu6
1 compromised version
- Oct 9, 2024
Malware in 1nzcej
1 compromised version
- Oct 9, 2024
Malware in svuv9u
1 compromised version
- Oct 9, 2024
Malicious code in xkpnm0 (npm)
- Oct 9, 2024
Malicious code in working-today--roblox-rise-of-nations-script-8ayh1b (npm)
- Oct 9, 2024
Malicious code in working-today--find-the-simpsons-171-script-roblox-4zlhl1 (npm)
- Oct 9, 2024
Malicious code in v81arj (npm)
- MAL-2024-9200Malwarenpmupdated-today-gen-muck-c-h-e-a-t-injector-f-r-e-e-god-m-ode-speed-h-a-c-k-2023-undetected-oi37fpOct 9, 2024
Malicious code in updated-today-gen-muck-c-h-e-a-t-injector-f-r-e-e-god-m-ode-speed-h-a-c-k-2023-undetected-oi37fp (npm)
Page 6542 of 7,307