Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,331 total · sorted newest first- Jul 21, 2024
Malicious code in asptcer (PyPI)
1 compromised version
- Jul 21, 2024
Malicious code in gentorqkkh1 (PyPI)
2 compromised versions
- Jul 21, 2024
Malicious code in gentorqkkh (PyPI)
1 compromised version
- Jul 21, 2024
Malicious code in shadycss (npm)
1 compromised version
- Jul 21, 2024
Malicious code in testjsonn2 (PyPI)
1 compromised version
- Jul 21, 2024
Malicious code in testjson3 (PyPI)
1 compromised version
- Jul 21, 2024
Malicious code in testjsonn1 (PyPI)
6 compromised versions
- Jul 20, 2024
Malicious code in oj-odcs-common (npm)
2 compromised versions
- Jul 20, 2024
Malicious code in @celigo/fuse-ui (npm)
1 compromised version
- Jul 19, 2024
Malicious code in fireauth.args (npm)
2 compromised versions
- Jul 19, 2024
Malicious code in fe-bootstrap (npm)
3 compromised versions
- Jul 19, 2024
Malware in geico_design_kit
1 compromised version
- Jul 19, 2024
Malware in firefly-sdk-ts
1 compromised version
- Jul 18, 2024
Malicious code in marvinjs (npm)
2 compromised versions
- Jul 18, 2024
Malicious code in test-ssssnpm-com-test (npm)
1 compromised version
- Jul 18, 2024
Malicious code in x91yz (npm)
1 compromised version
- Jul 18, 2024
Malicious code in express-jwt-v6 (npm)
1 compromised version
- Jul 17, 2024
Malicious code in firefly-sdk-ts (npm)
1 compromised version
- Jul 17, 2024
Malicious code in noblox.ts-core (npm)
1 compromised version
- Jul 17, 2024
Malicious code in @playsistemico/core (npm)
2 compromised versions
- Jul 17, 2024
Malicious code in mock_simple_module_relative (npm)
2 compromised versions
- Jul 17, 2024
Malware in mock_simple_module
1 compromised version
- Jul 17, 2024
Malware in mock_simple_module_relative
1 compromised version
- Jul 16, 2024
Malicious code in mock_simple_module (npm)
1 compromised version
- Jul 16, 2024
Malicious code in globalstyling (npm)
1 compromised version
- Jul 16, 2024
Malicious code in pleasedontcall (npm)
1 compromised version
- Jul 16, 2024
Malicious code in toolbox-controller (npm)
1 compromised version
- Jul 16, 2024
Malicious code in evil-hitcon-2024 (npm)
- Jul 16, 2024
Malware in evil-hitcon-2024
1 compromised version
- Jul 16, 2024
Malicious code in selfbot.js-v14 (npm)
- Jul 16, 2024
Malicious code in mizuki7777 (npm)
- Jul 16, 2024
Malware in mizuki7777
1 compromised version
- Jul 16, 2024
Malware in selfbot.js-v14
1 compromised version
- Jul 16, 2024
Malicious code in zonduutest (npm)
6 compromised versions
- Jul 15, 2024
Malicious code in inline-icons (npm)
4 compromised versions
- Jul 15, 2024
Malicious code in icca-core-lib (npm)
1 compromised version
- Jul 15, 2024
Malicious code in health-and-wellness-collab-macro-deploy (npm)
1 compromised version
- Jul 15, 2024
Malicious code in img-aws-s3-object-multipart-copy (npm)
- Jul 15, 2024
Malware in img-aws-s3-object-multipart-copy
1 compromised version
- Jul 15, 2024
Malware in noblox-cores-ts
1 compromised version
- Jul 15, 2024
Malware in discord-api-ts
1 compromised version
- Jul 15, 2024
Malicious code in moto-test-int (npm)
- Jul 15, 2024
Malicious code in moti-another-test2 (npm)
- Jul 15, 2024
Malicious code in moti-another-test1 (npm)
- Jul 15, 2024
Malware in moti-dep-con-test
1 compromised version
- Jul 15, 2024
Malware in moti-another-test2
1 compromised version
- Jul 15, 2024
Malware in moto-test-int
1 compromised version
- Jul 15, 2024
Malware in moti-another-test1
1 compromised version
- Jul 15, 2024
Malicious code in transitive-vulnerability-demo (npm)
- Jul 15, 2024
Malicious code in jfrog-ci-templates (npm)
Page 6604 of 7,307