Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jun 25, 2024
Malicious code in pilvarctf (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in piercing-library (npm)
1 compromised version
- Jun 25, 2024
Malicious code in picket-fe-bundler (npm)
1 compromised version
- Jun 25, 2024
Malicious code in pickby (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in pichincha (npm)
1 compromised version
- Jun 25, 2024
Malicious code in pgrokd (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in pelisplus-ver-scream-6-2023-peliculas-online-hd (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in pelisplus-repelis-ver-tu-jhoothi-main-makkaar-peliculas-completa-en-espanol (npm)
1 compromised version
- Jun 25, 2024
Malicious code in pelisplus-repelis-ver-night-train-peliculas-completa-en-espanol (npm)
1 compromised version
- Jun 25, 2024
Malicious code in pelisplus-repelis-ver-house-party-peliculas-completa-en-espanol (npm)
1 compromised version
- MAL-2024-2860Malwarenpmpelisplus-repelis-ver-detective-knight-independence-peliculas-completa-en-espanolJun 25, 2024
Malicious code in pelisplus-repelis-ver-detective-knight-independence-peliculas-completa-en-espanol (npm)
1 compromised version
- Jun 25, 2024
Malicious code in pelisplus-repelis-ver-creed-3-peliculas-completa-en-espanol-01 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in pelisplus-repelis-ver-a-man-called-otto-peliculas-completa-en-espanol (npm)
1 compromised version
- Jun 25, 2024
Malicious code in pelicula-completa-john-wick-4-ver-pelicula-completa-johnn-wick-4-4k (npm)
1 compromised version
- Jun 25, 2024
Malicious code in pelicula-completa-john-wick-4-ver-pelicula-completa-john-wick-0-4k (npm)
1 compromised version
- Jun 25, 2024
Malicious code in pdfjs2 (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in pcstudybible5free_better__hdns (npm)
1 compromised version
- Jun 25, 2024
Malicious code in pco-apigw-common-layer (npm)
1 compromised version
- Jun 25, 2024
Malicious code in pb-styles-v1 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in paysecuretest (npm)
1 compromised version
- Jun 25, 2024
Malicious code in paysecure (npm)
1 compromised version
- Jun 25, 2024
Malicious code in paypalscriptprovider (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in payload_package123 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in payload_package1 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in pattern.json (npm)
1 compromised version
- Jun 25, 2024
Malicious code in passport-ui-component (npm)
1 compromised version
- Jun 25, 2024
Malicious code in partnerapp (npm)
1 compromised version
- Jun 25, 2024
Malicious code in parsing-utils (npm)
5 compromised versions
- Jun 25, 2024
Malicious code in papaya_mango_corrupt (npm)
1 compromised version
- Jun 25, 2024
Malicious code in papaya_banana_evil (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in papapaapapapapapapaappaapaaaaad (npm)
1 compromised version
- Jun 25, 2024
Malicious code in papapaapapapapapapaappaapaaaaa (npm)
1 compromised version
- Jun 25, 2024
Malicious code in pap-events (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in pap-client (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in pako-1 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in pagbank-for-woocommerce (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in packs-a (npm)
1 compromised version
- Jun 25, 2024
Malicious code in packageast-tedfh-sdgf-gg (npm)
1 compromised version
- Jun 25, 2024
Malicious code in package-shopify-tester (npm)
1 compromised version
- Jun 25, 2024
Malicious code in package-pkf-dfghj-ss (npm)
1 compromised version
- Jun 25, 2024
Malicious code in package-inherit (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in package-egsdg-gdsfg-nn (npm)
1 compromised version
- Jun 25, 2024
Malicious code in package-apso-dfpgdo-uu (npm)
1 compromised version
- Jun 25, 2024
Malicious code in paala (npm)
1 compromised version
- Jun 25, 2024
Malicious code in pa-mojs (npm)
1 compromised version
- Jun 25, 2024
Malicious code in pa-mjxjs (npm)
1 compromised version
- Jun 25, 2024
Malicious code in owasp-zap-extension (npm)
1 compromised version
- Jun 25, 2024
Malicious code in owasp-aasvs (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in overstock-logger (npm)
12 compromised versions
- Jun 25, 2024
Malicious code in our-status (npm)
1 compromised version
Page 6699 of 7,293