Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jun 25, 2024
Malicious code in @mosfe/s3plus (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @mosfe/portal-proxy (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @mosfe/owl-config (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @mosfe/lion (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @mosfe/beam-plugin-s3plus (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @mosfe/beam-lint-config (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @mosfe/beam-git-util (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @mosfe/beam (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @mosfe/arender-vue (npm)
1 compromised version
- Jun 25, 2024
Malicious code in toolbox-pkg-components (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in mf-seller-xp-commons-objects (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in mf-seller-xp-commons-module-scanner (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in mf-seller-xp-commons-error-handlers (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in @maia-web/angular (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @m00kr4n3/e2e-test (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @locallife/page (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @locallife/log (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @locallife/init (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @locallife/hooks (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @li-test/foo (npm)
1 compromised version
- Jun 25, 2024
Malicious code in leveldb-decryptor (npm)
23 compromised versions
- Jun 25, 2024
Malicious code in @lbank/lbank-utils (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @lbank/lbank-ui (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @lbank/lbank-request (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @ks-radar/search (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @ks-radar/radar-send-web-log-collect (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @ks-radar/radar-seed (npm)
1 compromised version
- Jun 25, 2024
Malicious code in radar-error-collect (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @ks-radar/radar-core-krn (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @ks-radar/radar-component-collect (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @ks-radar/radar-blood-lineage-collect (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @ks-radar/radar-api-collect (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @ks-radar/olap-auth (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @ks-radar/mini-program (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @klapp-support/widget-interaction (npm)
3 compromised versions
- Jun 25, 2024
Malicious code in workspace-1 (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ngx-iceberg-links (npm)
1 compromised version
- Jun 25, 2024
Malicious code in ngx-iceberg (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @indrive.io/my-test-package (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @ikea-aoa/component-store-selector (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @ikea-aoa/component-popover (npm)
2 compromised versions
- Jun 25, 2024
Malicious code in @ikea-aoa/component-lightbox (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @hweb/hua-js (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @ikea-aoa/component-financial-services (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @husky-x/gatsby-theme-husky (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @hpanel-mf/shared (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in @hpanel-mf/hpanel (npm)
6 compromised versions
- Jun 25, 2024
Malicious code in @hotwire/react-utilities (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @hotwire/react-me (npm)
1 compromised version
- Jun 25, 2024
Malicious code in @hotcookies/bar (npm)
1 compromised version
Page 6722 of 7,293