Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,237 total · sorted newest first- Dec 14, 2023
Malicious code in web3-core-subscription (npm)
- Dec 14, 2023
Malware in web3-core-subscription
1 compromised version
- Dec 14, 2023
Malicious code in primeng-layout (npm)
1 compromised version
- Dec 14, 2023
Malicious code in @ledgerhq/connect-kit (npm)
- Dec 14, 2023
Malware in @ledgerhq/connect-kit
1 compromised version
- Dec 14, 2023
Malicious code in twk-boilerplate-template (npm)
1 compromised version
- Dec 14, 2023
Malicious code in katal-sellercentralhmdsupport (npm)
1 compromised version
- Dec 14, 2023
Malicious code in css-hell (npm)
- Dec 14, 2023
Malware in css-hell
1 compromised version
- Dec 14, 2023
Malicious code in @gtfobar/pwn (npm)
16 compromised versions
- Dec 14, 2023
Malware in @gtfobar/pwn
1 compromised version
- Dec 13, 2023
Malicious code in @dle-multiform-angular-component/core (npm)
1 compromised version
- Dec 13, 2023
Malicious code in @dle-clo-bento-component/dist (npm)
1 compromised version
- Dec 12, 2023
Malicious code in npm_package_babel_plugins_3_1_pragma (npm)
1 compromised version
- Dec 12, 2023
Malicious code in blockchain-transactions (npm)
- Dec 12, 2023
Malware in blockchain-transactions
1 compromised version
- Dec 11, 2023
Malicious code in rechtspraak.insolventies (npm)
1 compromised version
- Dec 11, 2023
Malicious code in rechtspraak.namenlijst (npm)
1 compromised version
- Dec 11, 2023
Malicious code in npi.rechtspraaknl.web (npm)
1 compromised version
- Dec 11, 2023
Malicious code in blockchain-contracts (npm)
- Dec 11, 2023
Malware in blockchain-contracts
1 compromised version
- Dec 11, 2023
Malicious code in project-onesite (npm)
1 compromised version
- Dec 11, 2023
Malicious code in bynderweb (npm)
1 compromised version
- Dec 11, 2023
Malicious code in rechtspraak.huwelijksgoederenregister (npm)
1 compromised version
- Dec 11, 2023
Malicious code in rechtspraak.ccbr (npm)
1 compromised version
- Dec 11, 2023
Malware in shinchina
1 compromised version
- Dec 11, 2023
Malware in react-native-dual-pedometer
1 compromised version
- Dec 11, 2023
Malware in orchestrationdesk
1 compromised version
- Dec 10, 2023
Malicious code in shinchina (npm)
2 compromised versions
- Dec 9, 2023
Malicious code in react-native-dual-pedometer (npm)
2 compromised versions
- Dec 9, 2023
Malicious code in orchestrationdesk (npm)
2 compromised versions
- Dec 8, 2023
Malicious code in privalia-app (npm)
1 compromised version
- Dec 8, 2023
Malicious code in sentrybrowser (npm)
- Dec 8, 2023
Malware in sentrybrowser
1 compromised version
- Dec 8, 2023
Malicious code in details.app (npm)
1 compromised version
- Dec 7, 2023
Malicious code in multiversx-wallet (npm)
- Dec 7, 2023
Malware in multiversx-wallet
1 compromised version
- Dec 7, 2023
Malicious code in cronos-lib (npm)
- Dec 7, 2023
Malicious code in cosmos-wallet-js (npm)
- Dec 7, 2023
Malware in cosmos-wallet-js
1 compromised version
- Dec 7, 2023
Malware in cronos-lib
1 compromised version
- Dec 6, 2023
Malware in solodev-cms
1 compromised version
- Dec 6, 2023
Malicious code in kindly-testing (npm)
- Dec 6, 2023
Malware in kindly-testing
1 compromised version
- Dec 6, 2023
Malware in killroad-ss-x
1 compromised version
- Dec 6, 2023
Malicious code in react-hook-form-latest (npm)
5 compromised versions
- Dec 6, 2023
Malicious code in killroad-ss-x (npm)
1 compromised version
- Dec 6, 2023
Malicious code in @saas-mf/ccm (npm)
1 compromised version
- Dec 6, 2023
Malware in @huby/infovist-report
1 compromised version
- Dec 5, 2023
Malicious code in @huby/infovist-report (npm)
3 compromised versions
Page 6801 of 7,305