Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jun 25, 2024
Malicious code in descuyid (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dependencyconfusion5 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dependencyconfusion2 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dependency-poc-for-testing-only-aswfsfghsssbx (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dependency-poc-for-testing-only (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dependdency (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dependabot-updater-action (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dep_mal2 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in dep-c (npm)
2 compromised versions
- MAL-2024-2074Malwarenpmdemon-slayer-kimetsu-no-yaiba-to-the-swordsmith-village-online-movie-free-on-123moviesJun 25, 2024
Malicious code in demon-slayer-kimetsu-no-yaiba-to-the-swordsmith-village-online-movie-free-on-123movies (npm)
1 compromised version
- MAL-2024-2073Malwarenpmdemon-slayer-kimetsu-no-yaiba-to-the-swordsmith-village-2023-peliculas-online-en-espanol-hdJun 25, 2024
Malicious code in demon-slayer-kimetsu-no-yaiba-to-the-swordsmith-village-2023-peliculas-online-en-espanol-hd (npm)
1 compromised version
- MAL-2024-2072Malwarenpmdemon-slayer-kimetsu-no-yaiba-to-the-swordsmith-village-2023-online-on-123moviesJun 25, 2024
Malicious code in demon-slayer-kimetsu-no-yaiba-to-the-swordsmith-village-2023-online-on-123movies (npm)
1 compromised version
- Jun 25, 2024
Malicious code in delphire-io-portal (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in dell_esg_theme (npm)
1 compromised version
- Jun 25, 2024
Malicious code in delivery-promise (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in decode-2021-fe (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in dcrawjs (npm)
1 compromised version
- Jun 25, 2024
Malicious code in datamodel.core.dm (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in darkhat-hard-to-find-package-do-not-require-it (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in daily-electron (npm)
1 compromised version
- Jun 25, 2024
Malicious code in daily-app-message (npm)
1 compromised version
- Jun 25, 2024
Malicious code in d11-foo (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cz-react-ui-library (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cyber.dhs.gov (npm)
1 compromised version
- MAL-2024-2052Malwarenpmcxhn-wikh-raeng-kwa-nrk-4-2023-john-wick-chapter-4-tem-reu-xng-du_nang-xxnlinJun 25, 2024
Malicious code in cxhn-wikh-raeng-kwa-nrk-4-2023-john-wick-chapter-4-tem-reu-xng-du_nang-xxnlin (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cw-mock-api (npm)
1 compromised version
- Jun 25, 2024
Malicious code in custom-video-daily-react (npm)
1 compromised version
- Jun 25, 2024
Malicious code in custom-proxy (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in cusip (npm)
1 compromised version
- Jun 25, 2024
Malicious code in curlix (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cuevana3-ver-john-wick-4-la-pelicula-completa-online-gratis4k (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in cuevana-ver_avatar_2_2022_pelicula_completa_online_en_espanol_hdd (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cuevana-3-ver-john-wick-4-pelicula-completa-en-espanol-y-latino (npm)
1 compromised version
- MAL-2024-2042Malwarenpmcuevana-3-ver-john-wick-4-2023-peliculas-completas-en-espanol-ol-pelisplus-repelis-latinJun 25, 2024
Malicious code in cuevana-3-ver-john-wick-4-2023-peliculas-completas-en-espanol-ol-pelisplus-repelis-latin (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cuevana-3-ver-john-wick-4-2023-pelicula-completa-en-espanol-y-latino (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cuevana-3-ver-john-wick-4-2023-descargar-la-pelicula (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cuevana-3-ver-john-wick-4-2023-des-cargar-la-peliculao-completa (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cuevana-3-free-ver-john-wick-4-completa-en-espanol-gratis-latino (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cuenta-ahorro (npm)
2 compromised versions
- MAL-2024-2036Malwarenpmcue-vana-3-john-wick-4-iv-2023-ver-en-espanol-latino-descargar-la-pelicula-completa-esp127456Jun 25, 2024
Malicious code in cue-vana-3-john-wick-4-iv-2023-ver-en-espanol-latino-descargar-la-pelicula-completa-esp127456 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in cta-onboard-express (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in csino-slots (npm)
1 compromised version
- Jun 25, 2024
Malicious code in crowdfund-contract (npm)
1 compromised version
- Jun 25, 2024
Malicious code in crosswalker (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in cro-stakingtest (npm)
1 compromised version
- Jun 25, 2024
Malicious code in creed-3-online-free-is-creed-iii-on-streamings (npm)
1 compromised version
- Jun 25, 2024
Malicious code in creed-3-movie-online-free-at-home (npm)
1 compromised version
- Jun 25, 2024
Malicious code in creed-3-fullmovies-online-at-homes-free-hds4k (npm)
1 compromised version
- Jun 25, 2024
Malicious code in crazydown (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in coreconnect (npm)
3 compromised versions
Page 6713 of 7,293