Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,237 total · sorted newest first- Jan 20, 2024
Malicious code in siif_components (npm)
3 compromised versions
- Jan 18, 2024
Malicious code in analyticstracker (npm)
1 compromised version
- Jan 18, 2024
Malicious code in oscompatible (npm)
- Jan 18, 2024
Malware in oscompatible
1 compromised version
- Jan 18, 2024
Malicious code in storefront_h5_sdk (npm)
3 compromised versions
- Jan 18, 2024
Malicious code in pd-ui-kit (npm)
9 compromised versions
- Jan 17, 2024
Malware in jupiter-emoji-old
1 compromised version
- Jan 17, 2024
Malicious code in uptime-bot (npm)
- Jan 17, 2024
Malicious code in discord.js-v12selfbot (npm)
- Jan 17, 2024
Malware in uptime-bot
1 compromised version
- Jan 17, 2024
Malware in discord.js-v12selfbot
1 compromised version
- Jan 17, 2024
Malicious code in naoi.js (npm)
4 compromised versions
- Jan 17, 2024
Malware in naoi.js
1 compromised version
- Jan 17, 2024
Malicious code in discordjs-selfbot-v33 (npm)
- Jan 17, 2024
Malicious code in discord.js-selfbot-vl3 (npm)
- Jan 17, 2024
Malicious code in discord.js-seifbot-v13 (npm)
- Jan 17, 2024
Malicious code in discord-selfbot-v13 (npm)
- Jan 17, 2024
Malware in discord-selfbot-v13
1 compromised version
- Jan 17, 2024
Malware in discord.js-seifbot-v13
1 compromised version
- Jan 17, 2024
Malware in discordjs-selfbot-v33
1 compromised version
- Jan 17, 2024
Malware in discord.js-selfbot-vl3
1 compromised version
- Jan 17, 2024
Malicious code in noleakdmall (npm)
- Jan 17, 2024
Malicious code in dmalldiscordfriends (npm)
- Jan 17, 2024
Malicious code in discord.js-selfbot-dmallfriends-v13 (npm)
- Jan 17, 2024
Malicious code in discord.js-dmall-friends (npm)
- Jan 17, 2024
Malware in discord.js-selfbot-dmallfriends-v13
1 compromised version
- Jan 17, 2024
Malware in dmalldiscordfriends
1 compromised version
- Jan 17, 2024
Malware in discord.js-dmall-friends
1 compromised version
- Jan 17, 2024
Malware in noleakdmall
1 compromised version
- Jan 17, 2024
Malicious code in uhqsniper (npm)
- Jan 17, 2024
Malicious code in discord.js-selfbot-dmall-v13 (npm)
- Jan 17, 2024
Malicious code in discord.js-lock-selfbot-v13 (npm)
- Jan 17, 2024
Malicious code in child-proces (npm)
- Jan 17, 2024
Malware in uhqsniper
1 compromised version
- Jan 17, 2024
Malware in discord.js-selfbot-dmall-v13
1 compromised version
- Jan 17, 2024
Malware in child-proces
1 compromised version
- Jan 17, 2024
Malware in discord.js-lock-selfbot-v13
1 compromised version
- Jan 17, 2024
Malicious code in discord.js-sb-v13 (npm)
- Jan 17, 2024
Malicious code in dicsord.js-selfbot-v13 (npm)
- Jan 17, 2024
Malware in discord.js-sb-v13
1 compromised version
- Jan 17, 2024
Malware in dicsord.js-selfbot-v13
1 compromised version
- Jan 16, 2024
Malicious code in noblox.js-proxy-server (npm)
3 compromised versions
- Jan 16, 2024
Malicious code in jupiter-emoji-old (npm)
1 compromised version
- Jan 16, 2024
Malicious code in testing-dep-collab-obsfucated (npm)
1 compromised version
- Jan 16, 2024
Malicious code in djs-selfbot-v14 (npm)
5 compromised versions
- Jan 16, 2024
Malware in djs-selfbot-v14
1 compromised version
- Jan 16, 2024
Malware in noblox.js-oauth
1 compromised version
- Jan 15, 2024
Malicious code in testing-burp-library-please-ignore (npm)
1 compromised version
- Jan 15, 2024
Malicious code in djs13-fetcher (npm)
11 compromised versions
- Jan 15, 2024
Malware in djs13-fetcher
1 compromised version
Page 6794 of 7,305