Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,885 total · sorted newest first- Sep 4, 2024
Malicious code in nginerrer-web-shell (npm)
10 compromised versions
- Sep 4, 2024
Malware in nginerrer-web-shell
1 compromised version
- Sep 4, 2024
Malicious code in noierrdev-web3-shell (npm)
3 compromised versions
- Sep 4, 2024
Malware in noierrdev-web3-shell
1 compromised version
- Sep 4, 2024
Malicious code in my-css-package (npm)
- Sep 4, 2024
Malware in my-css-package
1 compromised version
- Sep 4, 2024
Malicious code in grand_xss (npm)
8 compromised versions
- Sep 4, 2024
Malware in grand_xss
1 compromised version
- Sep 4, 2024
Malicious code in td-emerald-standards (npm)
1 compromised version
- Sep 4, 2024
Malicious code in afe-base-component (npm)
1 compromised version
- Sep 3, 2024
Malicious code in e2e-testa (npm)
1 compromised version
- Sep 3, 2024
Malicious code in @google-research/retvecjs (npm)
2 compromised versions
- Sep 3, 2024
Malicious code in ywoeuwe (npm)
1 compromised version
- Sep 3, 2024
Malicious code in nspwieo (npm)
1 compromised version
- Sep 3, 2024
Malicious code in hwieiur (npm)
1 compromised version
- Sep 3, 2024
Malicious code in esdjiw (npm)
1 compromised version
- Sep 3, 2024
Malicious code in mhnumjp (npm)
1 compromised version
- Sep 3, 2024
Malicious code in dowload_ebok_todas_as_sextas_by_paola_carosella_uz4x6 (npm)
- MAL-2024-8713Malwarenpmdowload_ebok_il_codice_wildix_la_vera_storia_del_centralino_b_by_emiliano_tomasoni_laura_piaz_p70e8Sep 3, 2024
Malicious code in dowload_ebok_il_codice_wildix_la_vera_storia_del_centralino_b_by_emiliano_tomasoni_laura_piaz_p70e8 (npm)
- Sep 3, 2024
Malicious code in dowload_ebok_farouche_atalante_by_emilie_druilhe_nx2bj (npm)
- Sep 3, 2024
Malicious code in dowload_ebok_everything_in_between_a_rocker_romance_by_melissa_toppen_fp7ge (npm)
- Sep 3, 2024
Malware in dowload_ebok_farouche_atalante_by_emilie_druilhe_nx2bj
1 compromised version
- GHSA-px9c-7639-9xx3Malwarenpmdowload_ebok_everything_in_between_a_rocker_romance_by_melissa_toppen_fp7geSep 3, 2024
Malware in dowload_ebok_everything_in_between_a_rocker_romance_by_melissa_toppen_fp7ge
1 compromised version
- GHSA-cfhw-hr7m-3xgcMalwarenpmdowload_ebok_il_codice_wildix_la_vera_storia_del_centralino_b_by_emiliano_tomasoni_laura_piaz_p70e8Sep 3, 2024
Malware in dowload_ebok_il_codice_wildix_la_vera_storia_del_centralino_b_by_emiliano_tomasoni_laura_piaz_p70e8
1 compromised version
- Sep 3, 2024
Malware in dowload_ebok_todas_as_sextas_by_paola_carosella_uz4x6
1 compromised version
- MAL-2024-8718Malwarenpmdowload_ebok_women_who_run_with_the_wolves_by_clarissa_pinkola_estes_phd_p7pgiSep 3, 2024
Malicious code in dowload_ebok_women_who_run_with_the_wolves_by_clarissa_pinkola_estes_phd_p7pgi (npm)
- Sep 3, 2024
Malicious code in dowload_ebok_the_secret_by_rhonda_byrne_qnyoi (npm)
- Sep 3, 2024
Malicious code in dowload_ebok_maria_theresia_by_elisabeth_badinter_w1uoa (npm)
- Sep 3, 2024
Malicious code in dowload_ebok_lenin_y_el_totalitarismo_by_mauricio_rojas_szvld (npm)
- Sep 3, 2024
Malware in dowload_ebok_the_secret_by_rhonda_byrne_qnyoi
1 compromised version
- Sep 3, 2024
Malware in dowload_ebok_maria_theresia_by_elisabeth_badinter_w1uoa
1 compromised version
- GHSA-6mj3-rj8q-99j2Malwarenpmdowload_ebok_women_who_run_with_the_wolves_by_clarissa_pinkola_estes_phd_p7pgiSep 3, 2024
Malware in dowload_ebok_women_who_run_with_the_wolves_by_clarissa_pinkola_estes_phd_p7pgi
1 compromised version
- Sep 3, 2024
Malware in dowload_ebok_lenin_y_el_totalitarismo_by_mauricio_rojas_szvld
1 compromised version
- Sep 3, 2024
Malicious code in assistance-finder-ui (npm)
3 compromised versions
- Sep 3, 2024
Malware in assistance-finder-ui
1 compromised version
- Sep 3, 2024
Malicious code in wekan (npm)
1 compromised version
- Sep 3, 2024
Malicious code in muthuthehacker (npm)
1 compromised version
- Sep 3, 2024
Malicious code in muthuhackermc (npm)
- Sep 3, 2024
Malicious code in muthuhacker (npm)
1 compromised version
- Sep 3, 2024
Malicious code in muthu (npm)
1 compromised version
- Sep 3, 2024
Malware in muthuhackermc
1 compromised version
- Sep 3, 2024
Malware in muthuthehacker
1 compromised version
- Sep 3, 2024
Malware in wekan
1 compromised version
- Sep 3, 2024
Malware in muthu
1 compromised version
- Sep 3, 2024
Malware in muthuhacker
1 compromised version
- Sep 2, 2024
Malicious code in pojang-resorter (PyPI)
56 compromised versions
- Sep 2, 2024
Malicious code in @diotoborg/voluptatum-repellendus-architecto (npm)
- Sep 2, 2024
Malicious code in @diotoborg/voluptas-nulla (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sit-voluptas (npm)
- Sep 2, 2024
Malicious code in @diotoborg/similique-fugit (npm)
Page 6552 of 7,298