Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jun 25, 2024
Malicious code in instreacts (npm)
1 compromised version
- Jun 25, 2024
Malicious code in instant-plugin (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in instant-cash-app-money-generator-2023-code-ujalo (npm)
1 compromised version
- Jun 25, 2024
Malicious code in instant-cash-app-money-generator-2023-code-poaq3 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in instant-cash-app-money-generator-2023-code-nakjd (npm)
1 compromised version
- Jun 25, 2024
Malicious code in instant-cash-app-money-generator-2023-code-jyerw (npm)
1 compromised version
- Jun 25, 2024
Malicious code in instant-cash-app-money-generator-2023-code-jwopq (npm)
1 compromised version
- Jun 25, 2024
Malicious code in instant-cash-app-money-generator-2023-code-hqiuy (npm)
1 compromised version
- Jun 25, 2024
Malicious code in instant-cash-app-money-generator-2023-code-balpw (npm)
1 compromised version
- Jun 25, 2024
Malicious code in instant-cash-app-money-generator-2023-code-bakaq (npm)
1 compromised version
- Jun 25, 2024
Malicious code in installping (npm)
1 compromised version
- Jun 25, 2024
Malicious code in inside-design-stencil (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in injected-curltest (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in infraestructure-svp (npm)
1 compromised version
- Jun 25, 2024
Malicious code in influx-query-builder (npm)
1 compromised version
- Jun 25, 2024
Malicious code in index-template-lol (npm)
1 compromised version
- Jun 25, 2024
Malicious code in indeedblog (npm)
1 compromised version
- Jun 25, 2024
Malicious code in incom-css (npm)
1 compromised version
- Jun 25, 2024
Malicious code in in.juspay.dotp (npm)
1 compromised version
- Jun 25, 2024
Malicious code in importlib-metadata (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in ifood-bank-account-validator-redux-form-8 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ie3-ihm-lib-ngx (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in identity-web (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in icomm-mobile (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hyperion-form (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hyperion-autologging (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hw-webpack-config (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hw-tooltip (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hw-popup (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in hugo-cloudflare-docs (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hub-natixis (npm)
1 compromised version
- Jun 25, 2024
Malicious code in http-api-lookup (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hq-watch-john-wick-chapter-4-full-movies-online-free-at-homee (npm)
1 compromised version
- Jun 25, 2024
Malicious code in how_to_watch_miami_open_2023_tennis_free_e (npm)
1 compromised version
- Jun 25, 2024
Malicious code in how-to-watch-scream-6-online-free-fullmovies (npm)
1 compromised version
- Jun 25, 2024
Malicious code in how-to-watch-scream-6-movie-online-for-free-at-home (npm)
1 compromised version
- Jun 25, 2024
Malicious code in how-to-watch-john-wick-cha-pter-4-fullmovies-at-homes-on-123-movies (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hoots-lib (npm)
7 compromised versions
- Jun 25, 2024
Malicious code in hoo-watch-black-adam-full-movies-online-streamings-at-homes (npm)
1 compromised version
- Jun 25, 2024
Malicious code in historic-rates-line-chart (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hilton_cms (npm)
7 compromised versions
- Jun 25, 2024
Malicious code in hiiiiiiiiiiiiiiiiiiiiii (npm)
1 compromised version
- Jun 25, 2024
Malicious code in highchartsexport (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in hexojs (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hexmex-tesstt (npm)
1 compromised version
- Jun 25, 2024
Malicious code in hermione-login-plugin (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in heres-how-to-watch-scream-6-online-free-fullmovies-123mioves (npm)
1 compromised version
- Jun 25, 2024
Malicious code in here-watch-tu-jhoothi-main-makkar-at-online-streamings-at-homedsews (npm)
1 compromised version
- Jun 25, 2024
Malicious code in here-watch-scream-6-2023-online-on-fullmovies-free-at-home (npm)
1 compromised version
- Jun 25, 2024
Malicious code in here-watch-john-wick-chapter-4-full-movies-2023-online-free-streaming-4k (npm)
1 compromised version
Page 6705 of 7,293