Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jun 25, 2024
Malicious code in getorcreateprecachecontroller (npm)
1 compromised version
- Jun 25, 2024
Malicious code in generate-protocol (npm)
1 compromised version
- Jun 25, 2024
Malicious code in gdxgxvxdewt (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in gcommon-ui-mobile (npm)
1 compromised version
- Jun 25, 2024
Malicious code in gcc-patch (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in gatsby-plugin-substrate (npm)
1 compromised version
- Jun 25, 2024
Malicious code in gambit-interface (npm)
1 compromised version
- Jun 25, 2024
Malicious code in gaia-docs (npm)
1 compromised version
- Jun 25, 2024
Malicious code in gaaid (npm)
1 compromised version
- Jun 25, 2024
Malicious code in fusionauth-cbor (npm)
1 compromised version
- Jun 25, 2024
Malicious code in fury-sites (npm)
1 compromised version
- Jun 25, 2024
Malicious code in full-watch-tu-jhoothi-main-makkar-on-fullmovies-online-streaming-at-homees14 (npm)
1 compromised version
- MAL-2024-2403Malwarenpmfull-watch-tu-jhoothi-main-makkar-on-fullmovies-online-streaming-at-homees114Jun 25, 2024
Malicious code in full-watch-tu-jhoothi-main-makkar-on-fullmovies-online-streaming-at-homees114 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in full-watch-tu-jhoothi-main-makkar-on-fullmovies-online-streaming-at-homee4ks (npm)
1 compromised version
- Jun 25, 2024
Malicious code in full-watch-tu-jhoothi-main-makkar-on-fullmovies-online-streaming-at-homee46 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in full-watch-tu-jhoothi-main-makkar-on-fullmovies-online-streaming-at-homee2 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in full-watch-tu-jhoothi-main-makkar-on-fullmovies-online-streaming-at-homee12 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in full-watch-tu-jhoothi-main-makkar-on-fullmovies-online-streaming-at-home (npm)
1 compromised version
- Jun 25, 2024
Malicious code in full-watch-john-wick-chapter-4-2023-fullmovies-online-at-homef72 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in full-watch-john-wick-chapter-4-2023-fullmovies-online-at-homef71 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in fq-ui (npm)
17 compromised versions
- Jun 25, 2024
Malicious code in fpti-tracker (npm)
1 compromised version
- Jun 25, 2024
Malicious code in foremonnn (npm)
1 compromised version
- Jun 25, 2024
Malicious code in foremon78 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in forage-core (npm)
1 compromised version
- Jun 25, 2024
Malicious code in fonts.macpaw.com (npm)
1 compromised version
- Jun 25, 2024
Malicious code in flux_dev_tools.server.flask (npm)
1 compromised version
- Jun 25, 2024
Malicious code in flux_dev_tools (npm)
1 compromised version
- Jun 25, 2024
Malicious code in fluent-system-icons (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in fluent-icons-library (npm)
5 compromised versions
- Jun 25, 2024
Malicious code in flp_all (npm)
1 compromised version
- Jun 25, 2024
Malicious code in float-kit (npm)
12 compromised versions
- Jun 25, 2024
Malicious code in flipper-scripts (npm)
1 compromised version
- Jun 25, 2024
Malicious code in flipper-plugins (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in flight-deck-frontend-client (npm)
1 compromised version
- Jun 25, 2024
Malicious code in flask-angular (npm)
1 compromised version
- Jun 25, 2024
Malicious code in firefly-shared-ts (npm)
1 compromised version
- Jun 25, 2024
Malicious code in fireblocks-staking-sdk (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in findnewtranslationkeys (npm)
1 compromised version
- Jun 25, 2024
Malicious code in financialtimes-classic (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in financialforce (npm)
9 compromised versions
- Jun 25, 2024
Malicious code in file-q-and-a (npm)
1 compromised version
- Jun 25, 2024
Malicious code in fca-nayan-api (npm)
1 compromised version
- Jun 25, 2024
Malicious code in fca-farebi-remake (npm)
1 compromised version
- Jun 25, 2024
Malicious code in fca-candy-darkster (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in fca-candy (npm)
1 compromised version
- Jun 25, 2024
Malicious code in fca-amir-remake (npm)
1 compromised version
- Jun 25, 2024
Malicious code in farebi-remake (npm)
1 compromised version
- Jun 25, 2024
Malicious code in farebi-amir-remake (npm)
1 compromised version
- Jun 25, 2024
Malicious code in fallen-fallen-web (npm)
1 compromised version
Page 6707 of 7,293