Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,335 total · sorted newest first- Jul 29, 2024
Malware in ent-widget-ssn
1 compromised version
- Jul 29, 2024
Malware in ent-widget-phone
1 compromised version
- Jul 29, 2024
Malware in ent-widget-occupation
1 compromised version
- Jul 29, 2024
Malware in ent-disclosure-mocks
1 compromised version
- Jul 29, 2024
Malware in mmp-test-utils
1 compromised version
- Jul 29, 2024
Malware in usaa-modal
1 compromised version
- Jul 29, 2024
Malicious code in testalonimaurice (npm)
1 compromised version
- Jul 29, 2024
Malicious code in personal-profile-common (npm)
2 compromised versions
- Jul 29, 2024
Malicious code in ent-widget-marital-status (npm)
- Jul 29, 2024
Malicious code in ent-widget-dob (npm)
- Jul 29, 2024
Malicious code in ent-widget-citizenship (npm)
- Jul 29, 2024
Malware in testalonimaurice
1 compromised version
- Jul 29, 2024
Malware in ent-widget-addcap
1 compromised version
- Jul 29, 2024
Malware in ent-widget-address
1 compromised version
- Jul 29, 2024
Malware in ent-widget-gender
1 compromised version
- Jul 29, 2024
Malware in ent-widget-dob
1 compromised version
- Jul 29, 2024
Malware in personal-profile-common
1 compromised version
- Jul 29, 2024
Malware in usaa-a11y-test
1 compromised version
- Jul 29, 2024
Malware in ent-widget-marital-status
1 compromised version
- Jul 29, 2024
Malware in ent-widget-citizenship
1 compromised version
- Jul 29, 2024
Malware in ent-file-upload-widget
1 compromised version
- Jul 29, 2024
Malware in testaloni-jarneese
1 compromised version
- Jul 29, 2024
Malware in ent-widget-military
1 compromised version
- Jul 29, 2024
Malicious code in income_access_npm_config (npm)
2 compromised versions
- Jul 29, 2024
Malware in income_access_npm_config
1 compromised version
- Jul 29, 2024
Malware in sendapp
1 compromised version
- Jul 29, 2024
Malware in noc-chatbot
1 compromised version
- Jul 29, 2024
Malware in postman-zendesk-support-theme
1 compromised version
- Jul 29, 2024
Malicious code in jayanta_test (npm)
- Jul 29, 2024
Malicious code in cordova-plugin-acuant (npm)
- Jul 29, 2024
Malware in cordova-plugin-acuant
1 compromised version
- Jul 29, 2024
Malware in dagit
1 compromised version
- Jul 29, 2024
Malware in jayanta_test
1 compromised version
- Jul 29, 2024
Malicious code in dagster-docs (npm)
- Jul 29, 2024
Malware in dagster-docs
1 compromised version
- Jul 28, 2024
Malicious code in soali (PyPI)
1 compromised version
- Jul 28, 2024
Malicious code in soal (PyPI)
1 compromised version
- Jul 28, 2024
Malicious code in ebell (PyPI)
1 compromised version
- Jul 28, 2024
Malicious code in ebe (PyPI)
1 compromised version
- Jul 28, 2024
Malicious code in a-oder (PyPI)
1 compromised version
- Jul 28, 2024
Malicious code in melio-platform-api-client (RubyGems)
9 compromised versions
- Jul 28, 2024
Malicious code in noc-chatbot (npm)
1 compromised version
- Jul 28, 2024
Malicious code in zapier-elements (npm)
1 compromised version
- Jul 28, 2024
Malicious code in byted-cg (npm)
1 compromised version
- Jul 28, 2024
Malicious code in symphony-familiarity (npm)
3 compromised versions
- Jul 28, 2024
Malicious code in ml-keyframer (npm)
4 compromised versions
- Jul 28, 2024
Malicious code in pkl-vscode (npm)
6 compromised versions
- Jul 28, 2024
Malicious code in byted-ucenter (npm)
1 compromised version
- Jul 27, 2024
Malicious code in nvk-tools (npm)
1 compromised version
- Jul 27, 2024
Malicious code in bb-ui-tools (npm)
2 compromised versions
Page 6598 of 7,307