Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Apr 15, 2024
Malicious code in viiiivek (npm)
- Apr 15, 2024
Malicious code in trip-component-platform-online-usp (npm)
- Apr 15, 2024
Malicious code in trip-component-platform-online-prepermission-popup (npm)
- Apr 15, 2024
Malicious code in trip-component-platform-online-header (npm)
- Apr 15, 2024
Malicious code in trip-component-platform-online-goto (npm)
- Apr 15, 2024
Malicious code in trip-component-platform-online-footer (npm)
- Apr 15, 2024
Malicious code in trip-component-platform-online-cookie-banner (npm)
- Apr 15, 2024
Malicious code in heroicons1 (npm)
1 compromised version
- Apr 15, 2024
Malicious code in discourse-markdown-it (npm)
- Apr 15, 2024
Malicious code in discourse-i18n (npm)
- Apr 15, 2024
Malicious code in deprecation-silencer (npm)
- Apr 15, 2024
Malware in viiiivek
1 compromised version
- Apr 15, 2024
Malware in trip-component-platform-online-cookie-banner
1 compromised version
- Apr 15, 2024
Malware in trip-component-platform-online-goto
1 compromised version
- Apr 15, 2024
Malware in discourse-markdown-it
1 compromised version
- Apr 15, 2024
Malware in trip-component-platform-online-footer
1 compromised version
- Apr 15, 2024
Malware in discourse-i18n
1 compromised version
- Apr 15, 2024
Malware in deprecation-silencer
1 compromised version
- Apr 15, 2024
Malware in trip-component-platform-online-usp
1 compromised version
- Apr 15, 2024
Malware in trip-component-platform-online-prepermission-popup
1 compromised version
- Apr 15, 2024
Malware in heroicons1
1 compromised version
- Apr 15, 2024
Malware in trip-component-platform-online-header
1 compromised version
- Apr 15, 2024
Malicious code in wt-fe-buz-utilities-collection (npm)
- Apr 15, 2024
Malware in wt-fe-buz-utilities-collection
1 compromised version
- Apr 11, 2024
Malicious code in reqargs (PyPI)
3 compromised versions
- Apr 10, 2024
Malicious code in @lbnqduy11805/turbo-octo-memory (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/super-duper-train (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/sturdy-chainsaw (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/refactored-octo-carnival (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/psychic-waffle (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/congenial-octo-guide (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/bookish-sniffle (npm)
- Apr 10, 2024
Malware in @lbnqduy11805/psychic-waffle
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/refactored-octo-carnival
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/bookish-sniffle
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/super-duper-train
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/sturdy-chainsaw
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/congenial-octo-guide
1 compromised version
- Apr 10, 2024
Malware in @lbnqduy11805/turbo-octo-memory
1 compromised version
- Apr 10, 2024
Malicious code in @lbnqduy11805/verbose-pancake (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/urban-octo-adventure (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/sturdy-waddle (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/stunning-octo-parakeet (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/stunning-fishstick (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/special-palm-tree (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/silver-parakeet (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/shiny-rotary-phone (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/refactored-eureka (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/potential-octo-enigma (npm)
- Apr 10, 2024
Malicious code in @lbnqduy11805/potential-giggle (npm)
Page 6739 of 7,293