Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Mar 18, 2024
Malicious code in sqltest6 (npm)
- Mar 18, 2024
Malicious code in rancho-extensions-app (npm)
- Mar 18, 2024
Malicious code in packagerandomattackertest (npm)
- Mar 18, 2024
Malicious code in custom-header-js (npm)
- Mar 18, 2024
Malicious code in bouncifyrn (npm)
- Mar 18, 2024
Malware in packagerandomattackertest
1 compromised version
- Mar 18, 2024
Malware in rancho-extensions-app
1 compromised version
- Mar 18, 2024
Malware in sqltest6
1 compromised version
- Mar 18, 2024
Malware in bouncifyrn
1 compromised version
- Mar 18, 2024
Malware in custom-header-js
1 compromised version
- Mar 18, 2024
Malware in soundcloud-scrape
1 compromised version
- Mar 18, 2024
Malicious code in tslint-slick (npm)
3 compromised versions
- Mar 18, 2024
Malicious code in tsconfig-slick (npm)
5 compromised versions
- Mar 18, 2024
Malicious code in babel-preset-slick (npm)
8 compromised versions
- Mar 18, 2024
Malware in tslint-slick
1 compromised version
- Mar 18, 2024
Malware in babel-preset-slick
1 compromised version
- Mar 18, 2024
Malware in tsconfig-slick
1 compromised version
- Mar 18, 2024
Malicious code in abcotv-ads (npm)
1 compromised version
- Mar 18, 2024
Malicious code in business-kpi-manager (PyPI)
1 compromised version
- Mar 17, 2024
Malicious code in abcotv-constants (npm)
1 compromised version
- Mar 17, 2024
Malicious code in discorddevsimple (npm)
1 compromised version
- Mar 17, 2024
Malicious code in cert-orchestration-adapter (PyPI)
1 compromised version
- Mar 17, 2024
Malicious code in mle-py-connector (PyPI)
1 compromised version
- Mar 17, 2024
Malicious code in formvalidationtestauth (npm)
1 compromised version
- Mar 17, 2024
Malicious code in lyft-stats (PyPI)
1 compromised version
- Mar 17, 2024
Malicious code in lyft-exceptions (PyPI)
1 compromised version
- Mar 17, 2024
Malicious code in lyft-settings (PyPI)
1 compromised version
- Mar 17, 2024
Malicious code in lyft-requests (PyPI)
1 compromised version
- Mar 16, 2024
Malicious code in r101-css (npm)
5 compromised versions
- Mar 15, 2024
Malicious code in ouramerica-constants (npm)
1 compromised version
- Mar 15, 2024
Malicious code in soundcloud-scrape (npm)
2 compromised versions
- Mar 15, 2024
Malware in frosmo-react
1 compromised version
- Mar 15, 2024
Malicious code in frosmo-react (npm)
5 compromised versions
- Mar 15, 2024
Malicious code in test12323123 (npm)
- Mar 15, 2024
Malware in test12323123
1 compromised version
- Mar 15, 2024
Malicious code in geico_design_kit2 (npm)
1 compromised version
- Mar 15, 2024
Malicious code in geico_design_kit (npm)
1 compromised version
- Mar 14, 2024
Malware in edgenuity
1 compromised version
- Mar 14, 2024
Malicious code in vinayak (npm)
- Mar 14, 2024
Malware in vinayak
1 compromised version
- Mar 14, 2024
Malicious code in edgenuity (npm)
2 compromised versions
- Mar 13, 2024
Malicious code in fhir.base.template (npm)
1 compromised version
- Mar 13, 2024
Malicious code in sdge-it-tdg-dynamicloadprofiles-sempra-poc (npm)
1 compromised version
- Mar 13, 2024
Malicious code in wm-lib-api-error-handler (npm)
1 compromised version
- Mar 12, 2024
Malicious code in sap.m (npm)
1 compromised version
- Mar 12, 2024
Malicious code in ccl-product-carousel (npm)
2 compromised versions
- Mar 12, 2024
Malware in ccl-product-carousel
1 compromised version
- Mar 12, 2024
Malicious code in shereyas (npm)
- Mar 12, 2024
Malware in shereyas
1 compromised version
- Mar 12, 2024
Malware in profectus-components
1 compromised version
Page 6744 of 7,293