Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jun 25, 2024
Malicious code in @region-lib/language (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @realty-front/zookeeper (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in @realty-front/ydb (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in @realty-front/webpack-utils (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in @realty-front/stylelint-plugins (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in @realty-front/payment-cards (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in @realty-front/jest-utils (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in @realty-front/icons (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in @realty-front/eslint-plugin (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in @realty-front/dev-tools (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in @realty-front/codegen (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in @realty-front/ad (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in @rc-mfe/cdn19-test (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in @pragatib20/trim-right (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @procol-tech/pro-icons (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @pocdz/crm-components (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in @pwndz/crm-components (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in @plangrid-private/temporal (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in @plangrid-private/react-scripts (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @plangrid-private/design-system-components (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @plangrid-private/demo-components (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @plangrid-private/babel-preset-react-app (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @panel-layout/layout (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @ozon-shared-deps/vuelidate (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in @ozon-shared-deps/vue-clipboard2 (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in @ozon-shared-deps/qs (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in @ozon-shared-deps/portal-vue (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in @ozon-shared-deps/ozon-maps__map-sdk (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in @ozon-shared-deps/ozon-fe__media-player-super-lite (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in @ozon-shared-deps/ozon-fe__media-player-standard (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in @ozon-shared-deps/dayjs (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in @realty-front/dayjs (npm)
4 compromised versions
- Jun 25, 2024
Malicious code in @ozon-shared-deps/bx-fe__video-player (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in @ozon-ob/twitch (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @ozon-ob/azkaban (npm)
1 compromised version
- Jun 25, 2024
Malicious code in format-date (npm)
1 compromised version
- Jun 25, 2024
Malicious code in tracker (npm)
1 compromised version
- Jun 25, 2024
Malicious code in event-bus (npm)
1 compromised version
- Jun 25, 2024
Malicious code in communication (npm)
1 compromised version
- Jun 25, 2024
Malicious code in media-player (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @ossillate/testfoo-my (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @now-par-components/sn-par-pillar (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in @nokia-smp/smp-client-library-18.9 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @nobixe9651/ng-fds (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @next-translate-root/locales (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in @next-translate-root/i18n (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in vue-datadog (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in get-current-env (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @mqttapplicationsamples/mqttjsclientextensions (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @mosfe/sso-sdk (npm)
1 compromised version
Page 6721 of 7,293