Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jun 25, 2024
Malicious code in new-tricks-v-bucks-generator-free_2023-sure-ahk-ghff (npm)
1 compromised version
- Jun 25, 2024
Malicious code in new-tricks-v-bucks-generator-free_2023-sure-ahk-erro (npm)
1 compromised version
- Jun 25, 2024
Malicious code in new-tricks-v-bucks-generator-free_2023-sure-ahk-efgd (npm)
1 compromised version
- Jun 25, 2024
Malicious code in new-tricks-v-bucks-generator-free_2023-sure-ahk-dvd (npm)
1 compromised version
- Jun 25, 2024
Malicious code in new-tricks-v-bucks-generator-free_2023-sure-ahk-cvvd (npm)
1 compromised version
- Jun 25, 2024
Malicious code in new-tricks-v-bucks-generator-free_2023-sure-ahk (npm)
1 compromised version
- Jun 25, 2024
Malicious code in new-tricks-v-bucks-generator-free_2023-safe-ahk (npm)
1 compromised version
- Jun 25, 2024
Malicious code in new-tricks-v-bucks-generator-free_2023-free-ahk (npm)
1 compromised version
- Jun 25, 2024
Malicious code in network-helper (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in netbet_react (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in nequi-utils (npm)
1 compromised version
- Jun 25, 2024
Malicious code in neogov (npm)
1 compromised version
- Jun 25, 2024
Malicious code in neil-tsakatsa (npm)
1 compromised version
- Jun 25, 2024
Malicious code in nayan-test (npm)
1 compromised version
- Jun 25, 2024
Malicious code in nayan-k (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in naql-ipc (npm)
1 compromised version
- Jun 25, 2024
Malicious code in namebench (npm)
1 compromised version
- Jun 25, 2024
Malicious code in myvaroniswebapp (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in mytardis-data-module (npm)
1 compromised version
- Jun 25, 2024
Malicious code in mypy-extensions (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in my_super_private_library (npm)
1 compromised version
- Jun 25, 2024
Malicious code in my-testeresss (npm)
43 compromised versions
- Jun 25, 2024
Malicious code in my-shopify-app (npm)
1 compromised version
- Jun 25, 2024
Malicious code in mtres (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in msstore-purchase (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in mrv-sender (npm)
1 compromised version
- Jun 25, 2024
Malicious code in mrdott1014331 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in mpx-monorepo (npm)
1 compromised version
- Jun 25, 2024
Malicious code in mozilla-central (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in mono-debug (npm)
1 compromised version
- Jun 25, 2024
Malicious code in momo-audiences (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in mobile-kohana (npm)
1 compromised version
- Jun 25, 2024
Malicious code in mobile-auth-library-react-native (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in mmm.his.nextgen.reporting.web (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in mistica (npm)
8 compromised versions
- Jun 25, 2024
Malicious code in minify_flp (npm)
1 compromised version
- Jun 25, 2024
Malicious code in mijngemeente-gateway (npm)
1 compromised version
- Jun 25, 2024
Malicious code in mh-web-hardware (npm)
1 compromised version
- Jun 25, 2024
Malicious code in meishi-max (npm)
1 compromised version
- Jun 25, 2024
Malicious code in meechum-user-lib-js (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in medwaycms (npm)
1 compromised version
- Jun 25, 2024
Malicious code in mediaspace (npm)
1 compromised version
- Jun 25, 2024
Malicious code in meccano (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in mdx-linter-devdocs (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in malpostinstall-tst (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in malpd (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in mall-front-babel-directive (npm)
1 compromised version
- Jun 25, 2024
Malicious code in malicious-pkg-demo (npm)
8 compromised versions
- Jun 25, 2024
Malicious code in macnative (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in mac-agents-cdk (npm)
1 compromised version
Page 6702 of 7,293