Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Mar 12, 2024
Malware in payatutest
1 compromised version
- Mar 12, 2024
Malicious code in pod-consumer-backend (npm)
- Mar 12, 2024
Malicious code in mastercard-postman-encryption-lib (npm)
- Mar 12, 2024
Malware in mastercard-postman-encryption-lib
1 compromised version
- Mar 12, 2024
Malware in open-banking-reference-application
1 compromised version
- Mar 12, 2024
Malware in dismissprovider
1 compromised version
- Mar 12, 2024
Malware in pod-consumer-backend
1 compromised version
- Mar 12, 2024
Malware in accessibletrap
1 compromised version
- Mar 12, 2024
Malware in ifl-primitives
1 compromised version
- Mar 12, 2024
Malware in dropdownformfield
1 compromised version
- Mar 12, 2024
Malware in ifl-css
1 compromised version
- Mar 12, 2024
Malicious code in rat-patrol (npm)
- Mar 12, 2024
Malware in rat-patrol
1 compromised version
- Mar 12, 2024
Malicious code in sempra-npm-poc (npm)
1 compromised version
- Mar 12, 2024
Malicious code in starknet4 (npm)
- Mar 12, 2024
Malicious code in salesforce-service-cloud (npm)
1 compromised version
- Mar 12, 2024
Malicious code in npm_macos (npm)
1 compromised version
- Mar 12, 2024
Malicious code in liquity (npm)
1 compromised version
- Mar 12, 2024
Malicious code in dcplot (npm)
1 compromised version
- Mar 12, 2024
Malware in webauthn-site-poc
1 compromised version
- Mar 12, 2024
Malware in salesforce-service-cloud
1 compromised version
- Mar 12, 2024
Malware in liquity
1 compromised version
- Mar 12, 2024
Malware in attrstore
1 compromised version
- Mar 12, 2024
Malware in c3-pricecaster
1 compromised version
- Mar 12, 2024
Malware in starknet4
1 compromised version
- Mar 12, 2024
Malware in dcplot
1 compromised version
- Mar 12, 2024
Malware in zksync-hardhat-template
1 compromised version
- Mar 12, 2024
Malware in npm_macos
1 compromised version
- Mar 12, 2024
Malicious code in bugcrowd-npm-poc (npm)
1 compromised version
- Mar 12, 2024
Malicious code in udp-components (npm)
2 compromised versions
- Mar 12, 2024
Malware in unity-util
1 compromised version
- Mar 12, 2024
Malware in unity-httpclient
1 compromised version
- Mar 12, 2024
Malware in unity-context
1 compromised version
- Mar 12, 2024
Malware in udp-components
1 compromised version
- Mar 11, 2024
Malicious code in open-banking-reference-application (npm)
1 compromised version
- Mar 10, 2024
Malicious code in attrstore (npm)
1 compromised version
- Mar 10, 2024
Malicious code in payatutest (npm)
1 compromised version
- Mar 10, 2024
Malicious code in dismissprovider (npm)
1 compromised version
- Mar 9, 2024
Malicious code in webauthn-site-poc (npm)
1 compromised version
- Mar 9, 2024
Malicious code in zksync-hardhat-template (npm)
1 compromised version
- Mar 9, 2024
Malicious code in jitsi-meet-electron (npm)
1 compromised version
- Mar 9, 2024
Malicious code in ifl-css (npm)
1 compromised version
- Mar 9, 2024
Malicious code in global-min-document (npm)
1 compromised version
- Mar 9, 2024
Malicious code in profectus-components (npm)
3 compromised versions
- Mar 9, 2024
Malicious code in dropdownformfield (npm)
1 compromised version
- Mar 9, 2024
Malicious code in accessibletrap (npm)
1 compromised version
- Mar 8, 2024
Malicious code in ycs (npm)
3 compromised versions
- Mar 8, 2024
Malicious code in unity-httpclient (npm)
1 compromised version
- Mar 8, 2024
Malicious code in unity-context (npm)
1 compromised version
- Mar 8, 2024
Malicious code in unity-util (npm)
1 compromised version
Page 6745 of 7,293