Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- May 8, 2024
Malicious code in dependency_confusion123 (RubyGems)
1 compromised version
- May 8, 2024
Malicious code in reduction-ping (npm)
- May 8, 2024
Malicious code in ping-bot-reduction (npm)
2 compromised versions
- May 8, 2024
Malicious code in discord-bot-3 (npm)
1 compromised version
- May 8, 2024
Malicious code in bot-login-plugins (npm)
1 compromised version
- May 8, 2024
Malware in bot-login-plugins
1 compromised version
- May 8, 2024
Malware in discord-bot-3
1 compromised version
- May 8, 2024
Malware in ping-bot-reduction
1 compromised version
- May 8, 2024
Malware in reduction-ping
1 compromised version
- May 8, 2024
Malicious code in sc-chimerra (npm)
1 compromised version
- May 8, 2024
Malicious code in sc-chimeraa (npm)
1 compromised version
- May 8, 2024
Malicious code in sc-chimer (npm)
1 compromised version
- May 8, 2024
Malware in sc-chimerra
1 compromised version
- May 8, 2024
Malware in sc-chimer
1 compromised version
- May 8, 2024
Malware in sc-chimeraa
1 compromised version
- May 8, 2024
Malicious code in jhsdfgghsdfjhds (npm)
7 compromised versions
- May 8, 2024
Malicious code in generic-synthetic-nodejs (npm)
6 compromised versions
- May 8, 2024
Malware in generic-synthetic-nodejs
1 compromised version
- May 8, 2024
Malware in jhsdfgghsdfjhds
1 compromised version
- May 8, 2024
Malware in zxcvbnmmmmmmkjhgfdssss
1 compromised version
- May 8, 2024
Malware in actions-next-bundle-analyzer
1 compromised version
- May 6, 2024
Malicious code in multiconnections (PyPI)
5 compromised versions
- May 6, 2024
Malicious code in discord-fetchers (npm)
1 compromised version
- May 6, 2024
Malware in scundev-pkg
1 compromised version
- May 6, 2024
Malicious code in @ssr-frontend/test-poc3 (npm)
- May 6, 2024
Malware in @ssr-frontend/test-poc3
1 compromised version
- May 6, 2024
Malware in packages-analytics
1 compromised version
- May 6, 2024
Malware in @ssr-frontend/packages-analytics
1 compromised version
- May 6, 2024
Malicious code in test-poc3 (npm)
- May 6, 2024
Malicious code in test-poc2 (npm)
- May 6, 2024
Malware in test-poc2
1 compromised version
- May 6, 2024
Malware in test-poc3
1 compromised version
- May 6, 2024
Malware in discord-color
1 compromised version
- May 6, 2024
Malware in lamia471
1 compromised version
- May 6, 2024
Malicious code in eslint-config1 (npm)
- May 6, 2024
Malicious code in @sxmp/logging (npm)
- May 6, 2024
Malicious code in @sxmp/detector (npm)
- May 6, 2024
Malware in eslint-config1
1 compromised version
- May 6, 2024
Malware in @sxmp/detector
1 compromised version
- May 6, 2024
Malware in @sxmp/logging
1 compromised version
- May 6, 2024
Malicious code in roblox.lua (npm)
1 compromised version
- May 5, 2024
Malicious code in threadxpools (PyPI)
2 compromised versions
- May 5, 2024
Malicious code in zxcvbnmmmmmmkjhgfdssss (npm)
2 compromised versions
- May 5, 2024
Malicious code in @assurantlabs/home-device-inventory (npm)
1 compromised version
- May 4, 2024
Malicious code in @socialdeal/uikit-whitelabel (npm)
1 compromised version
- May 4, 2024
Malicious code in ing-feat-grants-management (npm)
1 compromised version
- May 4, 2024
Malicious code in @aluffyz/discord-botjs (npm)
3 compromised versions
- May 3, 2024
Malicious code in lamia471 (npm)
1 compromised version
- May 3, 2024
Malicious code in elk-uikit (npm)
2 compromised versions
- May 3, 2024
Malicious code in uidm-react-lib (npm)
3 compromised versions
Page 6736 of 7,293