Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,237 total · sorted newest first- Jan 15, 2024
Malicious code in colors-utils (npm)
- Jan 15, 2024
Malicious code in apiv2-fetcher (npm)
- Jan 15, 2024
Malware in colors-utils
1 compromised version
- Jan 15, 2024
Malware in apiv2-fetcher
1 compromised version
- Jan 15, 2024
Malicious code in djs14-fetcher (npm)
11 compromised versions
- Jan 15, 2024
Malicious code in chalk-color-utils (npm)
9 compromised versions
- Jan 15, 2024
Malicious code in chalk-color (npm)
- Jan 15, 2024
Malware in chalk-color-utils
1 compromised version
- Jan 15, 2024
Malware in chalk-color
1 compromised version
- Jan 15, 2024
Malware in djs14-fetcher
1 compromised version
- Jan 15, 2024
Malicious code in sync-axios (npm)
11 compromised versions
- Jan 15, 2024
Malware in sync-axios
1 compromised version
- Jan 14, 2024
Malicious code in wdpr-validators (npm)
1 compromised version
- Jan 14, 2024
Malicious code in wdpr-device-detection (npm)
1 compromised version
- Jan 14, 2024
Malicious code in wdpr-node-logasaurus (npm)
1 compromised version
- Jan 14, 2024
Malicious code in wdpr-node-http-error-handler (npm)
1 compromised version
- Jan 14, 2024
Malicious code in wdpr-node-pep-crypto (npm)
1 compromised version
- Jan 14, 2024
Malicious code in wdpr-node-travel-agent-session (npm)
1 compromised version
- Jan 14, 2024
Malicious code in wdpr-node-conversation (npm)
1 compromised version
- Jan 14, 2024
Malicious code in wdpr-node-cdn (npm)
1 compromised version
- Jan 14, 2024
Malicious code in wdpr-geolocation (npm)
1 compromised version
- Jan 14, 2024
Malicious code in wdpr-ra-node-csp (npm)
1 compromised version
- Jan 14, 2024
Malicious code in synology-hct (npm)
1 compromised version
- Jan 13, 2024
Malicious code in synology-cft (npm)
1 compromised version
- Jan 13, 2024
Malicious code in heatwallet (npm)
1 compromised version
- Jan 13, 2024
Malicious code in pecko (npm)
1 compromised version
- Jan 13, 2024
Malicious code in newbooking (npm)
1 compromised version
- Jan 13, 2024
Malicious code in shoponline.epiroc.com (npm)
2 compromised versions
- Jan 12, 2024
Malicious code in aurora-webmail-pro (npm)
2 compromised versions
- Jan 12, 2024
Malicious code in api-utility (npm)
2 compromised versions
- Jan 12, 2024
Malware in eslint-plugin-unicorn-ts
1 compromised version
- Jan 12, 2024
Malware in chancets
1 compromised version
- Jan 12, 2024
Malicious code in tsb-authorization (npm)
- Jan 12, 2024
Malware in tsb-authorization
1 compromised version
- Jan 11, 2024
Malicious code in coloma (npm)
- Jan 11, 2024
Malware in coloma
1 compromised version
- Jan 11, 2024
Malware in ember-cli-progress-ci
1 compromised version
- Jan 11, 2024
Malicious code in djs-fetcher-v14 (npm)
5 compromised versions
- Jan 11, 2024
Malware in djs-fetcher-v14
1 compromised version
- Jan 11, 2024
Malicious code in pp-app-ui (npm)
3 compromised versions
- Jan 11, 2024
Malware in pp-app-ui
1 compromised version
- Jan 11, 2024
Malicious code in moduleprefix (npm)
- Jan 11, 2024
Malware in moduleprefix
1 compromised version
- Jan 11, 2024
Malicious code in nylas-sync (npm)
1 compromised version
- Jan 11, 2024
Malicious code in nylas-core (npm)
1 compromised version
- Jan 11, 2024
Malicious code in nylas-api (npm)
1 compromised version
- Jan 11, 2024
Malicious code in lwc-jest-serializer (npm)
1 compromised version
- Jan 11, 2024
Malicious code in akshansh-jaiswal-ctf (npm)
1 compromised version
- Jan 11, 2024
Malware in lwc-jest-serializer
1 compromised version
- Jan 11, 2024
Malware in nylas-api
1 compromised version
Page 6795 of 7,305