Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,237 total · sorted newest first- Dec 20, 2023
Malicious code in discord-selfbot-v13.js (npm)
22 compromised versions
- Dec 20, 2023
Malicious code in discord-sb-v13 (npm)
2 compromised versions
- Dec 20, 2023
Malware in discord-sb-v13
1 compromised version
- Dec 20, 2023
Malware in discord-selfbot-v13.js
1 compromised version
- Dec 20, 2023
Malware in djs-sb-v13
1 compromised version
- Dec 20, 2023
Malware in dsc-sb-v13
1 compromised version
- Dec 20, 2023
Malicious code in @unilin/dlw.scbase.staticsite (npm)
3 compromised versions
- Dec 19, 2023
Malicious code in unilin (npm)
2 compromised versions
- Dec 19, 2023
Malicious code in @diil-front/chip (npm)
1 compromised version
- Dec 19, 2023
Malicious code in create-codecpetjs-bdd-tests (npm)
1 compromised version
- Dec 19, 2023
Malicious code in test-codecpetjs-bdd-tests (npm)
2 compromised versions
- Dec 19, 2023
Malicious code in biobot (npm)
2 compromised versions
- Dec 19, 2023
Malicious code in hpulse (npm)
- Dec 19, 2023
Malicious code in fgrav (npm)
- Dec 19, 2023
Malware in hpulse
1 compromised version
- Dec 19, 2023
Malware in fgrav
1 compromised version
- Dec 19, 2023
Malware in paalni
1 compromised version
- Dec 19, 2023
Malicious code in users-lookup (npm)
- Dec 19, 2023
Malicious code in techouvot (npm)
- Dec 19, 2023
Malicious code in nice-dag-kernel (npm)
- Dec 19, 2023
Malicious code in ngx-xtra-schematics (npm)
- Dec 19, 2023
Malicious code in jupyter-notebook-deps (npm)
- Dec 19, 2023
Malicious code in figma-include-accessibility-annotations (npm)
- Dec 19, 2023
Malicious code in crossdomain-xhr (npm)
- Dec 19, 2023
Malicious code in bv-commons (npm)
- Dec 19, 2023
Malicious code in allianz (npm)
- Dec 19, 2023
Malware in crossdomain-xhr
1 compromised version
- Dec 19, 2023
Malware in bv-commons
1 compromised version
- Dec 19, 2023
Malware in ngx-xtra-schematics
1 compromised version
- Dec 19, 2023
Malware in nice-dag-kernel
1 compromised version
- Dec 19, 2023
Malware in users-lookup
1 compromised version
- Dec 19, 2023
Malware in allianz
1 compromised version
- Dec 19, 2023
Malware in figma-include-accessibility-annotations
1 compromised version
- Dec 19, 2023
Malware in techouvot
1 compromised version
- Dec 19, 2023
Malware in jupyter-notebook-deps
1 compromised version
- Dec 19, 2023
Malicious code in paalni (npm)
1 compromised version
- Dec 18, 2023
Malicious code in index.marko (npm)
1 compromised version
- Dec 18, 2023
Malware in blingbling-dasda
1 compromised version
- Dec 18, 2023
Malicious code in discord.js-unofficial (npm)
- Dec 18, 2023
Malicious code in arrays-string (npm)
- Dec 18, 2023
Malware in discord.js-unofficial
1 compromised version
- Dec 18, 2023
Malware in arrays-string
1 compromised version
- Dec 16, 2023
Malicious code in app-next-example-plugin (npm)
2 compromised versions
- Dec 16, 2023
Malicious code in blingbling-dasda (npm)
1 compromised version
- Dec 15, 2023
Malicious code in fio-registrations (npm)
1 compromised version
- Dec 15, 2023
Malicious code in 2e6d5f64604be31 (npm)
- Dec 15, 2023
Malware in 2e6d5f64604be31
1 compromised version
- Dec 15, 2023
Malicious code in spectro-cloud-docs (npm)
3 compromised versions
- Dec 15, 2023
Malicious code in react-persian-calendar-date-picker222 (npm)
- Dec 15, 2023
Malware in react-persian-calendar-date-picker222
1 compromised version
Page 6800 of 7,305