Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Feb 5, 2024
Malware in ngpd-merceros-ui-meta
1 compromised version
- Feb 5, 2024
Malware in librct
1 compromised version
- Feb 5, 2024
Malicious code in nan-win (npm)
- Feb 5, 2024
Malware in nan-win
1 compromised version
- Feb 5, 2024
Malware in hub-blockly
1 compromised version
- Feb 5, 2024
Malware in @time-loop/electron-panel-window
1 compromised version
- Feb 4, 2024
Malicious code in jera (npm)
3 compromised versions
- Feb 3, 2024
Malicious code in cifuzz (npm)
1 compromised version
- Feb 3, 2024
Malicious code in discord.js-commandsv14 (npm)
4 compromised versions
- Feb 2, 2024
Malicious code in ccl-modal (npm)
1 compromised version
- Feb 2, 2024
Malicious code in hub-blockly (npm)
1 compromised version
- Feb 2, 2024
Malicious code in @time-loop/electron-panel-window (npm)
1 compromised version
- Feb 2, 2024
Malicious code in node-production (npm)
- Feb 2, 2024
Malicious code in node-fetch-full (npm)
- Feb 2, 2024
Malware in node-production
1 compromised version
- Feb 2, 2024
Malware in node-fetch-full
1 compromised version
- Feb 2, 2024
Malicious code in hardhat-gas-optimizer (npm)
- Feb 2, 2024
Malware in hardhat-gas-optimizer
1 compromised version
- Feb 1, 2024
Malware in discord.js-sounds
1 compromised version
- Jan 31, 2024
Malicious code in identity-auth (npm)
3 compromised versions
- Jan 31, 2024
Malicious code in fdistube-config (npm)
- Jan 31, 2024
Malicious code in distube-f (npm)
- Jan 31, 2024
Malware in fdistube-config
1 compromised version
- Jan 31, 2024
Malware in distube-f
1 compromised version
- Jan 31, 2024
Malware in discord-cache
1 compromised version
- Jan 31, 2024
Malicious code in usaa-drag-drop (npm)
- Jan 31, 2024
Malware in eslint-plugin-cas
1 compromised version
- Jan 31, 2024
Malware in usaa-drag-drop
1 compromised version
- Jan 31, 2024
Malware in ent-cas-services
1 compromised version
- Jan 31, 2024
Malicious code in diil-selfservice-components (npm)
1 compromised version
- Jan 31, 2024
Malicious code in diil-front (npm)
1 compromised version
- Jan 31, 2024
Malware in diil-front
1 compromised version
- Jan 31, 2024
Malware in diil-selfservice-components
1 compromised version
- Jan 30, 2024
Malicious code in moblig-npm (npm)
2 compromised versions
- Jan 30, 2024
Malicious code in dragon7-dc-vulntest (npm)
1 compromised version
- Jan 29, 2024
Malicious code in wlwz-2312-2nd (npm)
- Jan 29, 2024
Malware in wlwz-2312-2nd
1 compromised version
- Jan 29, 2024
Malicious code in samsungads-publisher-portal-authorizer (npm)
1 compromised version
- Jan 29, 2024
Malicious code in npm_package_dependencies_core_js (npm)
1 compromised version
- Jan 29, 2024
Malicious code in npm_package_dependencies_linkify_it (npm)
1 compromised version
- Jan 29, 2024
Malicious code in npm_package_dependencies_promise_polyfill (npm)
1 compromised version
- Jan 29, 2024
Malicious code in npm_package_dependencies_regenerator_runtime (npm)
2 compromised versions
- Jan 29, 2024
Malware in discord.js-sound
1 compromised version
- Jan 29, 2024
Malicious code in take-cam (npm)
- Jan 29, 2024
Malicious code in russiapi (npm)
- Jan 29, 2024
Malicious code in jewishapi (npm)
- Jan 29, 2024
Malware in take-cam
1 compromised version
- Jan 29, 2024
Malware in jewishapi
1 compromised version
- Jan 29, 2024
Malware in russiapi
1 compromised version
- Jan 29, 2024
Malicious code in discord.js-dmall-v11 (npm)
Page 6749 of 7,293