Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Apr 10, 2024
Malware in shuaishuaiqiang
1 compromised version
- Apr 10, 2024
Malware in shuaishuai
1 compromised version
- Apr 10, 2024
Malware in shuaiqiang
1 compromised version
- Apr 10, 2024
Malicious code in @sber-site/sbercraft-nova-kit (npm)
- Apr 10, 2024
Malware in @sber-site/sbercraft-nova-kit
1 compromised version
- Apr 10, 2024
Malicious code in @sber-sd/assistant-web-sdk (npm)
- Apr 10, 2024
Malware in @sber-sd/assistant-web-sdk
1 compromised version
- Apr 8, 2024
Malware in f3ngtest12345677
1 compromised version
- Apr 8, 2024
Malicious code in tokenaddress (npm)
- Apr 8, 2024
Malware in tokenaddress
1 compromised version
- Apr 8, 2024
Malicious code in recxn-logs (npm)
- Apr 8, 2024
Malicious code in recxn-backup (npm)
- Apr 8, 2024
Malware in recxn-logs
1 compromised version
- Apr 8, 2024
Malware in recxn-backup
1 compromised version
- Apr 8, 2024
Malicious code in f3ngtest12345677 (npm)
3 compromised versions
- Apr 8, 2024
Malicious code in djs-colora (npm)
- Apr 8, 2024
Malicious code in discord-logs-v14 (npm)
- Apr 8, 2024
Malware in djs-colora
1 compromised version
- Apr 8, 2024
Malware in discord-logs-v14
1 compromised version
- Apr 8, 2024
Malicious code in payable-js-ipg-sdk-suba (npm)
- Apr 8, 2024
Malicious code in payable-js-ipg-sdk (npm)
- Apr 8, 2024
Malware in payable-js-ipg-sdk
1 compromised version
- Apr 8, 2024
Malware in payable-js-ipg-sdk-suba
1 compromised version
- Apr 8, 2024
Malware in nespresso-bi
1 compromised version
- Apr 6, 2024
Malicious code in stake-api (npm)
1 compromised version
- Apr 5, 2024
Malicious code in nespresso-bi (npm)
5 compromised versions
- Apr 4, 2024
Malicious code in lodash-electron (npm)
- Apr 4, 2024
Malware in lodash-electron
1 compromised version
- Apr 4, 2024
Malicious code in lyft-core (PyPI)
1 compromised version
- Apr 4, 2024
Malicious code in locus-website (npm)
1 compromised version
- Apr 4, 2024
Malicious code in tme-finance (npm)
1 compromised version
- Apr 4, 2024
Malicious code in context-hydrating (npm)
- Apr 4, 2024
Malware in context-hydrating
1 compromised version
- Apr 3, 2024
Malicious code in shopify-app-session-storage-prisma (npm)
- Apr 3, 2024
Malicious code in shopify-app-session-storage-drizzle (npm)
3 compromised versions
- Apr 3, 2024
Malicious code in shopify-app-js (npm)
- Apr 3, 2024
Malicious code in package-ddgjhd-weagd-24h (npm)
1 compromised version
- Apr 3, 2024
Malicious code in hydrogen-sfdgspsdmq-test1 (npm)
10 compromised versions
- Apr 3, 2024
Malware in hydrogen-sfdgspsdmq-test1
1 compromised version
- Apr 3, 2024
Malware in shopify-app-js
1 compromised version
- Apr 3, 2024
Malware in shopify-app-session-storage-prisma
1 compromised version
- Apr 3, 2024
Malware in package-ddgjhd-weagd-24h
1 compromised version
- Apr 3, 2024
Malware in shopify-app-session-storage-drizzle
1 compromised version
- Apr 3, 2024
Malicious code in package-dfgpd-dfgdfg-24h (npm)
1 compromised version
- Apr 3, 2024
Malware in package-dfgpd-dfgdfg-24h
1 compromised version
- Apr 3, 2024
Malicious code in metacord (npm)
- Apr 3, 2024
Malware in metacord
1 compromised version
- Apr 2, 2024
Malicious code in qlik-sense-dev (npm)
2 compromised versions
- Apr 2, 2024
Malicious code in qlik-sense-poc (npm)
3 compromised versions
- Apr 2, 2024
Malicious code in xo-page-test-components (npm)
1 compromised version
Page 6741 of 7,293