Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,237 total · sorted newest first- Jan 7, 2024
Malicious code in replit-extensions-react (npm)
1 compromised version
- Jan 7, 2024
Malicious code in dynatrace-oneagent-nodejs (npm)
1 compromised version
- Jan 7, 2024
Malicious code in akshansh-jaiswal-ctf-security (npm)
5 compromised versions
- Jan 7, 2024
Malicious code in noblox.js-oauth (npm)
1 compromised version
- Jan 7, 2024
Malicious code in noblox.js-servers (npm)
4 compromised versions
- Jan 6, 2024
Malicious code in error-can-not-resolve-resource (npm)
1 compromised version
- Jan 6, 2024
Malicious code in deep-search-exports-directory (npm)
1 compromised version
- Jan 6, 2024
Malicious code in bakery-dashboard (npm)
1 compromised version
- Jan 6, 2024
Malicious code in raspeditor (npm)
1 compromised version
- Jan 6, 2024
Malicious code in cloudflare-docs-theme (npm)
2 compromised versions
- Jan 6, 2024
Malicious code in shopify-netsuite-connector (npm)
5 compromised versions
- Jan 6, 2024
Malicious code in schedules-oauth-itwin (npm)
1 compromised version
- Jan 5, 2024
Malicious code in @monokera/react-components-storybook (npm)
1 compromised version
- Jan 5, 2024
Malicious code in axis-common-lib (npm)
1 compromised version
- Jan 5, 2024
Malicious code in holamessironaldo (npm)
1 compromised version
- Jan 5, 2024
Malicious code in d5-es6-sass-boilerplate (npm)
2 compromised versions
- Jan 5, 2024
Malicious code in paytm-common-components (npm)
1 compromised version
- Jan 5, 2024
Malicious code in kodiak2k (npm)
- Jan 5, 2024
Malware in kodiak2k
1 compromised version
- Jan 4, 2024
Malicious code in axelhowe (npm)
1 compromised version
- Jan 4, 2024
Malicious code in ether-sdk (npm)
3 compromised versions
- Jan 4, 2024
Malware in ether-sdk
1 compromised version
- Jan 3, 2024
Malicious code in snapfish (npm)
1 compromised version
- Jan 3, 2024
Malicious code in stupidrara (npm)
3 compromised versions
- Jan 3, 2024
Malicious code in warbeast2000 (npm)
- Jan 3, 2024
Malware in warbeast2000
1 compromised version
- Jan 3, 2024
Malicious code in page-configs (npm)
- Jan 3, 2024
Malicious code in mw-common-components (npm)
- Jan 3, 2024
Malicious code in metabase-enterprise (npm)
- Jan 3, 2024
Malicious code in airslate-navigation (npm)
- Jan 3, 2024
Malicious code in airslate-core-components (npm)
- Jan 3, 2024
Malware in mw-common-components
1 compromised version
- Jan 3, 2024
Malware in metabase-enterprise
1 compromised version
- Jan 3, 2024
Malware in airslate-core-components
1 compromised version
- Jan 3, 2024
Malware in page-configs
1 compromised version
- Jan 3, 2024
Malware in airslate-navigation
1 compromised version
- Jan 3, 2024
Malware in sparxy
1 compromised version
- Jan 3, 2024
Malicious code in casino-prismic (npm)
2 compromised versions
- Jan 2, 2024
Malicious code in chancets (npm)
3 compromised versions
- Jan 2, 2024
Malware in discord.js-self-v22
1 compromised version
- Jan 2, 2024
Malicious code in yield-api-documentation (npm)
- Jan 2, 2024
Malicious code in matomo-looker-studio-connector (npm)
- Jan 2, 2024
Malicious code in matomo-for-wordpress (npm)
- Jan 2, 2024
Malicious code in get_name_of_token (npm)
- Jan 2, 2024
Malicious code in bsc-allowance (npm)
- Jan 2, 2024
Malware in matomo-for-wordpress
1 compromised version
- Jan 2, 2024
Malware in matomo-looker-studio-connector
1 compromised version
- Jan 2, 2024
Malware in get_name_of_token
1 compromised version
- Jan 2, 2024
Malware in bsc-allowance
1 compromised version
- Jan 2, 2024
Malware in yield-api-documentation
1 compromised version
Page 6797 of 7,305