Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,237 total · sorted newest first- Nov 24, 2023
Malware in wehackrepos
1 compromised version
- Nov 24, 2023
Malicious code in discord-bottt (npm)
1 compromised version
- Nov 24, 2023
Malware in discord-bottt
1 compromised version
- Nov 23, 2023
Malicious code in grunt-ac-toolkit (npm)
1 compromised version
- Nov 23, 2023
Malicious code in todo-backend (npm)
- Nov 23, 2023
Malicious code in sofa1-shop (npm)
4 compromised versions
- Nov 23, 2023
Malicious code in serverless-provisioned-memory-report (npm)
- Nov 23, 2023
Malicious code in re_rank_demo (npm)
- Nov 23, 2023
Malicious code in purchase (npm)
- Nov 23, 2023
Malicious code in npm-base-template (npm)
- Nov 23, 2023
Malicious code in immutable-seaport (npm)
- Nov 23, 2023
Malicious code in eslint-plugin-discord (npm)
- Nov 23, 2023
Malicious code in arubawebappbackend (npm)
- Nov 23, 2023
Malicious code in areweplayingyet (npm)
- Nov 23, 2023
Malware in npm-base-template
1 compromised version
- Nov 23, 2023
Malware in arubawebappbackend
1 compromised version
- Nov 23, 2023
Malware in immutable-seaport
1 compromised version
- Nov 23, 2023
Malware in serverless-provisioned-memory-report
1 compromised version
- Nov 23, 2023
Malware in todo-backend
1 compromised version
- Nov 23, 2023
Malware in purchase
1 compromised version
- Nov 23, 2023
Malware in re_rank_demo
1 compromised version
- Nov 23, 2023
Malware in areweplayingyet
1 compromised version
- Nov 23, 2023
Malware in eslint-plugin-discord
1 compromised version
- Nov 23, 2023
Malware in sofa1-shop
1 compromised version
- Nov 23, 2023
Malicious code in starling-api-web-starter-kit (npm)
- Nov 23, 2023
Malicious code in nextcapital-client-demo (npm)
- Nov 23, 2023
Malicious code in mpesa_listener (npm)
- Nov 23, 2023
Malware in starling-api-web-starter-kit
1 compromised version
- Nov 23, 2023
Malware in mpesa_listener
1 compromised version
- Nov 23, 2023
Malware in nextcapital-client-demo
1 compromised version
- Nov 22, 2023
Malicious code in discord.js-ytsong (npm)
1 compromised version
- Nov 22, 2023
Malicious code in azureml-contrib-daskonbatch (PyPI)
1 compromised version
- Nov 22, 2023
Malicious code in yelp-cgeom1 (PyPI)
1 compromised version
- Nov 21, 2023
Malicious code in pod-financier-app (npm)
2 compromised versions
- Nov 21, 2023
Malicious code in primarycare (npm)
1 compromised version
- Nov 21, 2023
Malicious code in ory-config (npm)
1 compromised version
- Nov 21, 2023
Malicious code in build-buf-action (npm)
1 compromised version
- Nov 21, 2023
Malicious code in otnet-ory-network-tests (npm)
1 compromised version
- Nov 21, 2023
Malicious code in kratos-nextjs-react-example (npm)
1 compromised version
- Nov 21, 2023
Malicious code in basegulpfile (npm)
1 compromised version
- Nov 21, 2023
Malicious code in ory-demo (npm)
2 compromised versions
- Nov 21, 2023
Malicious code in discord.js-websong (npm)
3 compromised versions
- Nov 21, 2023
Malicious code in manage-cache (npm)
- Nov 21, 2023
Malware in mxtorie-api
1 compromised version
- Nov 21, 2023
Malware in manage-cache
1 compromised version
- Nov 21, 2023
Malware in mxtorie-prevname
1 compromised version
- Nov 21, 2023
Malware in jobserver
1 compromised version
- Nov 21, 2023
Malware in xpub-lib
1 compromised version
- Nov 21, 2023
Malware in vpc-nat-gateway-dependency
1 compromised version
- Nov 21, 2023
Malicious code in footnote-component (npm)
1 compromised version
Page 6804 of 7,305