Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Apr 22, 2024
Malicious code in shard-packages (npm)
- Apr 22, 2024
Malicious code in ecs-cdk (npm)
- Apr 22, 2024
Malicious code in cuckoo-3-web-ui-tooling (npm)
- Apr 22, 2024
Malware in shard-packages
1 compromised version
- Apr 22, 2024
Malware in ecs-cdk
1 compromised version
- Apr 22, 2024
Malware in swift-docc-rendeeeeeer
1 compromised version
- Apr 22, 2024
Malware in cuckoo-3-web-ui-tooling
1 compromised version
- Apr 22, 2024
Malware in teleport-app-example-node
1 compromised version
- Apr 22, 2024
Malicious code in djs-status (npm)
3 compromised versions
- Apr 22, 2024
Malicious code in djs-embeds-v2 (npm)
- Apr 22, 2024
Malicious code in discord-caches (npm)
- Apr 22, 2024
Malware in djs-status
1 compromised version
- Apr 22, 2024
Malware in djs-embeds-v2
1 compromised version
- Apr 22, 2024
Malware in discord-caches
1 compromised version
- Apr 22, 2024
Malicious code in waveapi (npm)
- Apr 22, 2024
Malware in waveapi
1 compromised version
- Apr 22, 2024
Malicious code in tari-explorer (npm)
12 compromised versions
- Apr 22, 2024
Malicious code in samplenodejsservice (npm)
7 compromised versions
- Apr 22, 2024
Malicious code in monitoring-coverage (npm)
5 compromised versions
- Apr 22, 2024
Malicious code in lambda-iss-location (npm)
5 compromised versions
- Apr 22, 2024
Malicious code in blockchain-explorer-api (npm)
6 compromised versions
- Apr 22, 2024
Malicious code in arkime (npm)
2 compromised versions
- Apr 22, 2024
Malware in lambda-iss-location
1 compromised version
- Apr 22, 2024
Malware in tari-explorer
1 compromised version
- Apr 22, 2024
Malware in arkime
1 compromised version
- Apr 22, 2024
Malware in samplenodejsservice
1 compromised version
- Apr 22, 2024
Malware in monitoring-coverage
1 compromised version
- Apr 22, 2024
Malware in blockchain-explorer-api
1 compromised version
- Apr 22, 2024
Malicious code in sid-client-manager (npm)
200 compromised versions
- Apr 22, 2024
Malware in sid-client-manager
1 compromised version
- Apr 19, 2024
Malicious code in djs-log (npm)
2 compromised versions
- Apr 19, 2024
Malware in djs-log
1 compromised version
- Apr 18, 2024
Malicious code in malpac (npm)
- Apr 18, 2024
Malware in malpac
1 compromised version
- Apr 18, 2024
Malicious code in somepackage-marksl (npm)
21 compromised versions
- Apr 18, 2024
Malware in somepackage-marksl
1 compromised version
- Apr 18, 2024
Malicious code in ui-common-components-angular (npm)
2 compromised versions
- Apr 17, 2024
Malicious code in metrics-balancer (npm)
1 compromised version
- Apr 17, 2024
Malicious code in @portal-packages/utils (npm)
1 compromised version
- Apr 17, 2024
Malicious code in @portal-packages/core (npm)
3 compromised versions
- Apr 17, 2024
Malicious code in cz-ifood-conventional-changelog (npm)
1 compromised version
- Apr 16, 2024
Malicious code in commitlint-config-ifood (npm)
1 compromised version
- Apr 16, 2024
Malicious code in web-ar-player (npm)
- Apr 16, 2024
Malicious code in snap-orca (npm)
- Apr 16, 2024
Malicious code in hosted-lenses-ui (npm)
- Apr 16, 2024
Malicious code in bluepurellwalker (npm)
- Apr 16, 2024
Malware in bluepurellwalker
1 compromised version
- Apr 16, 2024
Malware in hosted-lenses-ui
1 compromised version
- Apr 16, 2024
Malware in web-ar-player
1 compromised version
- Apr 16, 2024
Malware in snap-orca
1 compromised version
Page 6738 of 7,293