Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jun 25, 2024
Malicious code in aspnet-webapi-auth (npm)
1 compromised version
- Jun 25, 2024
Malicious code in asiox.js (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in asgiref (npm)
1 compromised version
- Jun 25, 2024
Malicious code in asc-deps (npm)
1 compromised version
- Jun 25, 2024
Malicious code in asap-test-keys (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in arriva-ui-lib (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in areyoustillindexing3 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in areyoustillindexing2 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in areyoustillindexing (npm)
1 compromised version
- Jun 25, 2024
Malicious code in arangodb (npm)
13 compromised versions
- Jun 25, 2024
Malicious code in appsd (npm)
1 compromised version
- Jun 25, 2024
Malicious code in applepay-components (npm)
1 compromised version
- Jun 25, 2024
Malicious code in applechirag (npm)
1 compromised version
- Jun 25, 2024
Malicious code in apomakqyr3 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in apollo-federation-integration-testsuite (npm)
1 compromised version
- Jun 25, 2024
Malicious code in apm-web-vitals (npm)
5 compromised versions
- Jun 25, 2024
Malicious code in api-discord-type (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in aonetecha1 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in anyone-deps (npm)
1 compromised version
- Jun 25, 2024
Malicious code in angular-tileview (npm)
1 compromised version
- Jun 25, 2024
Malicious code in anandakshya (npm)
1 compromised version
- Jun 25, 2024
Malicious code in amp-angular-cli (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in amir-remake (npm)
1 compromised version
- Jun 25, 2024
Malicious code in amap-core (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in am-ui-app-dashboards-mc (npm)
1 compromised version
- Jun 25, 2024
Malicious code in am-packages (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in am-alerter (npm)
1 compromised version
- Jun 25, 2024
Malicious code in alloy-icons (npm)
1 compromised version
- Jun 25, 2024
Malicious code in aliyundrive (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in alive-cor (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in alfalab (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ajv-8.11.0 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ai-chatbot-starter (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in ahmadzdzddzdzdzd (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ahmaddddddddddddddzdzdzdzdzd (npm)
1 compromised version
- Jun 25, 2024
Malicious code in agora-daily-conversion (npm)
1 compromised version
- Jun 25, 2024
Malicious code in addin-fuel-transaction-import (npm)
1 compromised version
- Jun 25, 2024
Malicious code in add-to-unscopable (npm)
1 compromised version
- Jun 25, 2024
Malicious code in adamandstore (npm)
1 compromised version
- Jun 25, 2024
Malicious code in adal-mac (npm)
1 compromised version
- Jun 25, 2024
Malicious code in activities-ui-components (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in activerisk (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in act-rules.github.io (npm)
1 compromised version
- MAL-2024-1721Malwarenpmaccion-devolucions-john-wick-keanu-reeves-accion-espanol-la-mejor-neova-pelicula-publicada--en-casa-en-lienia-lliena-loveJun 25, 2024
Malicious code in accion-devolucions-john-wick-keanu-reeves-accion-espanol-la-mejor-neova-pelicula-publicada--en-casa-en-lienia-lliena-love (npm)
1 compromised version
- MAL-2024-1720Malwarenpmaccion-devolucions-john-wick-keanu-reeves-accion-en-casa-la-mejor-neova-pelicula-publicada--en-casa-en-lienia-lliena-loveJun 25, 2024
Malicious code in accion-devolucions-john-wick-keanu-reeves-accion-en-casa-la-mejor-neova-pelicula-publicada--en-casa-en-lienia-lliena-love (npm)
1 compromised version
- MAL-2024-1719Malwarenpmaccion-devolucions-john-wick-keanu-reeves-accion-en-casa-la-mejor-neova-pelicula-4-k--en-casa-en-lienia-lliena-loveJun 25, 2024
Malicious code in accion-devolucions-john-wick-keanu-reeves-accion-en-casa-la-mejor-neova-pelicula-4-k--en-casa-en-lienia-lliena-love (npm)
1 compromised version
- Jun 25, 2024
Malicious code in accessibility-nav (npm)
1 compromised version
- Jun 25, 2024
Malicious code in abundance-token (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ably-cli (npm)
5 compromised versions
- Jun 25, 2024
Malicious code in abdulla-chat-api (npm)
1 compromised version
Page 6718 of 7,293