Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,237 total · sorted newest first- Jan 24, 2024
Malicious code in wlwz-2312-3306 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3204 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3203 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3202 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3201 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3200 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3108 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3107 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3106 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3105 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3104 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3103 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3102 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3101 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3100 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3008 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3007 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3006 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3005 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3004 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3003 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3002 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3001 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-3000 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2908 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2907 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2906 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2905 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2904 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2903 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2902 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2901 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2900 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2808 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2807 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2806 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2805 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2804 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2803 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2802 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2801 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2800 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2708 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2707 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2705 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2704 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2703 (npm)
- Jan 24, 2024
Malicious code in wlwz-2312-2601 (npm)
- Jan 24, 2024
Malware in wlwz-2312-3007
1 compromised version
- Jan 24, 2024
Malware in wlwz-2312-2708
1 compromised version
Page 6778 of 7,305