Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jun 12, 2024
Malware in aws-logs
1 compromised version
- Jun 12, 2024
Malware in ozonid
1 compromised version
- Jun 12, 2024
Malware in ozon-js
1 compromised version
- Jun 12, 2024
Malware in exel-js
1 compromised version
- Jun 12, 2024
Malware in randombullshitgo-js
1 compromised version
- Jun 12, 2024
Malware in core-webpack
1 compromised version
- Jun 12, 2024
Malicious code in ing-feat-lu-luxtrust-smartcard-authentication (npm)
1 compromised version
- Jun 12, 2024
Malicious code in ing-feat-lu-luxtrust-token-authentication (npm)
1 compromised version
- Jun 12, 2024
Malicious code in ing-feat-lu-luxtrust-stick-authentication (npm)
1 compromised version
- Jun 12, 2024
Malicious code in ing-feat-lu-luxtrust-scan-authentication (npm)
1 compromised version
- Jun 12, 2024
Malicious code in leocare-new (npm)
1 compromised version
- Jun 12, 2024
Malicious code in addthis-wordpress-plugin (npm)
1 compromised version
- Jun 12, 2024
Malicious code in ing-feat-grants-granting (npm)
1 compromised version
- Jun 12, 2024
Malicious code in blueprint-org-planning-app-adp-wrapper (npm)
1 compromised version
- Jun 12, 2024
Malicious code in atoz-attendance-app (npm)
- Jun 12, 2024
Malicious code in ato-z-web-identity-components-app-cdk-adp-wrapper (npm)
- Jun 12, 2024
Malware in blueprint-org-planning-app-adp-wrapper
1 compromised version
- Jun 12, 2024
Malware in ato-z-web-identity-components-app-cdk-adp-wrapper
1 compromised version
- Jun 12, 2024
Malware in atoz-attendance-app
1 compromised version
- Jun 12, 2024
Malicious code in virtuoso-web-chat (npm)
2 compromised versions
- Jun 12, 2024
Malware in virtuoso-web-chat
1 compromised version
- Jun 12, 2024
Malicious code in zwork (npm)
- Jun 12, 2024
Malware in zwork
1 compromised version
- Jun 12, 2024
Malicious code in icon-reactjs (npm)
1 compromised version
- Jun 11, 2024
Malicious code in cvsr (npm)
1 compromised version
- Jun 11, 2024
Malicious code in noblox.js-proxy-agent (npm)
1 compromised version
- Jun 11, 2024
Malicious code in noblox.js-discord (npm)
1 compromised version
- Jun 11, 2024
Malware in noblox.js-discord
1 compromised version
- Jun 11, 2024
Malware in noblox.js-proxy-agent
1 compromised version
- Jun 11, 2024
Malicious code in dell-ui-bootstrap (npm)
1 compromised version
- Jun 11, 2024
Malware in dell-ui-bootstrap
1 compromised version
- Jun 11, 2024
Malicious code in bootstrap-npm-webpack (npm)
1 compromised version
- Jun 11, 2024
Malware in bootstrap-npm-webpack
1 compromised version
- Jun 11, 2024
Malware in ct-helpers
1 compromised version
- Jun 11, 2024
Malicious code in mmsdk-apml-htmlrendererr (npm)
- Jun 11, 2024
Malicious code in asf-renderer (npm)
- Jun 11, 2024
Malicious code in asf-recorder (npm)
- Jun 11, 2024
Malicious code in asf-component-templateruntime (npm)
- Jun 11, 2024
Malicious code in asf-component-listrenderer (npm)
- Jun 11, 2024
Malicious code in apl-validator (npm)
- Jun 11, 2024
Malware in apl-validator
1 compromised version
- Jun 11, 2024
Malware in mmsdk-apml-htmlrendererr
1 compromised version
- Jun 11, 2024
Malware in asf-renderer
1 compromised version
- Jun 11, 2024
Malware in asf-component-listrenderer
1 compromised version
- Jun 11, 2024
Malware in asf-recorder
1 compromised version
- Jun 11, 2024
Malware in asf-component-templateruntime
1 compromised version
- Jun 11, 2024
Malicious code in portfolio-organism-adp-wrapper (npm)
1 compromised version
- Jun 11, 2024
Malicious code in mmsdk-apml-htmlrenderer (npm)
- Jun 11, 2024
Malware in portfolio-organism-adp-wrapper
1 compromised version
- Jun 11, 2024
Malware in stw-tenant-library
1 compromised version
Page 6727 of 7,293