Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- May 20, 2024
Malware in cors-parser
1 compromised version
- May 20, 2024
Malicious code in @westpac-components-web/hooks (npm)
2 compromised versions
- May 20, 2024
Malware in @westpac-components-web/hooks
1 compromised version
- May 20, 2024
Malicious code in test_dependency_confusion12 (npm)
- May 20, 2024
Malware in test_dependency_confusion12
1 compromised version
- May 20, 2024
Malicious code in @ozon-ob-toolbox/format-date (npm)
1 compromised version
- May 20, 2024
Malware in @ozon-ob-toolbox/format-date
1 compromised version
- May 20, 2024
Malicious code in @ozon-ob-foundation/tracker (npm)
1 compromised version
- May 20, 2024
Malicious code in @ozon-ob-foundation/event-bus (npm)
1 compromised version
- May 20, 2024
Malicious code in @ozon-ob-foundation/communication (npm)
1 compromised version
- May 20, 2024
Malware in @ozon-ob-foundation/tracker
1 compromised version
- May 20, 2024
Malware in @ozon-ob-foundation/communication
1 compromised version
- May 20, 2024
Malware in @ozon-ob-foundation/event-bus
1 compromised version
- May 20, 2024
Malicious code in @ozon-fe/media-player (npm)
1 compromised version
- May 20, 2024
Malware in @ozon-fe/media-player
1 compromised version
- May 19, 2024
Malicious code in mixtral-llm (npm)
5 compromised versions
- May 19, 2024
Malware in mixtral-llm
1 compromised version
- May 19, 2024
Malicious code in brand-adidas-design-tokens (npm)
- May 19, 2024
Malicious code in brand-adidas-asset-fonts (npm)
- May 19, 2024
Malware in brand-adidas-asset-fonts
1 compromised version
- May 19, 2024
Malware in brand-adidas-design-tokens
1 compromised version
- May 15, 2024
Malicious code in sigoner (npm)
- May 15, 2024
Malware in sigoner
1 compromised version
- May 14, 2024
Malicious code in testpkg3322 (PyPI)
1 compromised version
- May 13, 2024
Malicious code in by-logger (npm)
- May 13, 2024
Malicious code in by-dynamic-domain (npm)
9 compromised versions
- May 13, 2024
Malware in by-dynamic-domain
1 compromised version
- May 13, 2024
Malware in by-fetch
1 compromised version
- May 13, 2024
Malware in by-logger
1 compromised version
- May 13, 2024
Malicious code in qaqazzaaa (npm)
- May 13, 2024
Malware in qaqazzaaa
1 compromised version
- May 13, 2024
Malicious code in @asdfvr/qaqazzaaa (npm)
- May 13, 2024
Malware in @asdfvr/qaqazzaaa
1 compromised version
- May 13, 2024
Malicious code in discord-datas (npm)
- May 13, 2024
Malware in discord-datas
1 compromised version
- May 13, 2024
Malicious code in input-fns (npm)
- May 13, 2024
Malicious code in encodelen (npm)
- May 13, 2024
Malware in encodelen
1 compromised version
- May 13, 2024
Malware in input-fns
1 compromised version
- May 11, 2024
Malicious code in by-fetch (npm)
14 compromised versions
- May 9, 2024
Malicious code in fadam-module (npm)
- May 9, 2024
Malware in fadam-module
1 compromised version
- May 9, 2024
Malicious code in @content-platform/shared (npm)
- May 9, 2024
Malicious code in @content-platform/fadam-module (npm)
- May 9, 2024
Malware in @content-platform/shared
1 compromised version
- May 9, 2024
Malware in @content-platform/fadam-module
1 compromised version
- May 9, 2024
Malware in minecraft-net-core-services
1 compromised version
- May 8, 2024
Malware in ing-feat-grants-management
1 compromised version
- May 8, 2024
Malicious code in @assistedtax/demo (npm)
- May 8, 2024
Malware in @assistedtax/demo
1 compromised version
Page 6735 of 7,293