Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jun 24, 2024
Malicious code in @elza/auto-route-plugin (npm)
- Jun 24, 2024
Malware in @elza/auto-route-plugin
1 compromised version
- Jun 23, 2024
Malicious code in govgen-governance (npm)
2 compromised versions
- Jun 23, 2024
Malicious code in @amops/fetch (npm)
1 compromised version
- Jun 22, 2024
Malicious code in openstad-component-forms (npm)
1 compromised version
- Jun 20, 2024
Malicious code in melichat-component-library (npm)
1 compromised version
- Jun 20, 2024
Malicious code in trip-component-platform-online-region-selector (npm)
1 compromised version
- Jun 20, 2024
Malicious code in webquickauth (PyPI)
1 compromised version
- Jun 20, 2024
Malicious code in wordpress-theme-core (npm)
3 compromised versions
- Jun 20, 2024
Malicious code in tyk-developer-portal (npm)
2 compromised versions
- Jun 20, 2024
Malicious code in storefront-h5-sdk (npm)
1 compromised version
- Jun 20, 2024
Malicious code in comet-chat-react-ui-kit (npm)
2 compromised versions
- Jun 20, 2024
Malicious code in logoo (npm)
- Jun 20, 2024
Malicious code in imageg (npm)
- Jun 20, 2024
Malicious code in desainnew (npm)
- Jun 20, 2024
Malicious code in desain (npm)
- Jun 20, 2024
Malware in desain
1 compromised version
- Jun 20, 2024
Malware in imageg
1 compromised version
- Jun 20, 2024
Malware in desainnew
1 compromised version
- Jun 20, 2024
Malware in logoo
1 compromised version
- Jun 20, 2024
Malicious code in dsain (npm)
- Jun 20, 2024
Malware in dsain
1 compromised version
- Jun 20, 2024
Malicious code in nt4padyp (npm)
- Jun 20, 2024
Malicious code in nodem0m (npm)
- Jun 20, 2024
Malware in nodem0m
1 compromised version
- Jun 20, 2024
Malware in nt4padyp
1 compromised version
- Jun 20, 2024
Malicious code in pwi-cfa-components (npm)
- Jun 20, 2024
Malware in test-package-random-name-for-test
1 compromised version
- Jun 20, 2024
Malware in pwi-cfa-components
1 compromised version
- Jun 19, 2024
Malicious code in test-package-random-name-for-test (npm)
1 compromised version
- Jun 19, 2024
Malicious code in quickwebbasicauth (PyPI)
1 compromised version
- Jun 19, 2024
Malicious code in @wdpx/themes (npm)
1 compromised version
- Jun 18, 2024
Malicious code in draconianspeed (npm)
1 compromised version
- Jun 18, 2024
Malicious code in mvp-website-html (npm)
1 compromised version
- Jun 18, 2024
Malicious code in resolve-uri-latest (npm)
1 compromised version
- Jun 18, 2024
Malicious code in vivid_framework (npm)
1 compromised version
- Jun 18, 2024
Malicious code in rb-fare-breakup (npm)
- Jun 18, 2024
Malware in rb-payment-input
1 compromised version
- Jun 18, 2024
Malware in rb-fare-breakup
1 compromised version
- Jun 18, 2024
Malware in rb-info-banner
1 compromised version
- Jun 18, 2024
Malware in rb-accordion
1 compromised version
- Jun 18, 2024
Malware in vivid_framework
1 compromised version
- Jun 18, 2024
Malicious code in rb-info-banner (npm)
1 compromised version
- Jun 18, 2024
Malicious code in rb-accordion (npm)
1 compromised version
- Jun 18, 2024
Malicious code in rb-payment-input (npm)
1 compromised version
- Jun 18, 2024
Malicious code in stylee-logo (npm)
- Jun 18, 2024
Malicious code in mediaa (npm)
- Jun 18, 2024
Malicious code in logooo (npm)
- Jun 18, 2024
Malicious code in logo-stylee (npm)
- Jun 18, 2024
Malicious code in imagezz (npm)
Page 6725 of 7,293