Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,237 total · sorted newest first- Oct 2, 2023
Malware in anup-yogesh
1 compromised version
- Oct 2, 2023
Malicious code in fca-dongdev2006 (npm)
- Oct 2, 2023
Malware in fca-dongdev2006
1 compromised version
- Oct 2, 2023
Malicious code in @inconspicuously/test-lib-1 (npm)
- Oct 2, 2023
Malware in @inconspicuously/test-lib-1
1 compromised version
- Oct 2, 2023
Malicious code in n-common-static-data (npm)
- Oct 2, 2023
Malicious code in corporate-delegate-packages (npm)
4 compromised versions
- Oct 2, 2023
Malicious code in component---src-pages-corporate-delegate-packages-js (npm)
- Oct 2, 2023
Malware in component---src-pages-corporate-delegate-packages-js
1 compromised version
- Oct 2, 2023
Malware in n-common-static-data
1 compromised version
- Oct 2, 2023
Malware in corporate-delegate-packages
1 compromised version
- Oct 2, 2023
Malicious code in playwright-internal (npm)
- Oct 2, 2023
Malicious code in apidemo-app (npm)
- Oct 2, 2023
Malware in playwright-internal
1 compromised version
- Oct 2, 2023
Malware in imagery_export
1 compromised version
- Oct 2, 2023
Malware in apidemo-app
1 compromised version
- Oct 2, 2023
Malware in ubermenu
1 compromised version
- Oct 2, 2023
Malicious code in terminal-pro (npm)
- Oct 2, 2023
Malware in terminal-pro
1 compromised version
- Oct 2, 2023
Malware in starcoffe
1 compromised version
- Oct 2, 2023
Malicious code in fpmsm-icon (npm)
- Oct 2, 2023
Malware in fpmsm-icon
1 compromised version
- Oct 2, 2023
Malicious code in pyjio (PyPI)
1 compromised version
- Oct 1, 2023
Malicious code in symphony_ui (npm)
1 compromised version
- Sep 30, 2023
Malicious code in pyioler (PyPI)
1 compromised version
- Sep 29, 2023
Malicious code in @atbdigitalteam/ui-widgets (npm)
1 compromised version
- Sep 29, 2023
Malicious code in imagery_export (npm)
1 compromised version
- Sep 29, 2023
Malicious code in ubermenu (npm)
1 compromised version
- Sep 28, 2023
Malicious code in starcoffe (npm)
1 compromised version
- Sep 27, 2023
Malicious code in zenfi-sdk (npm)
4 compromised versions
- Sep 27, 2023
Malicious code in csm27878 (npm)
1 compromised version
- Sep 27, 2023
Malicious code in csmqrcode (npm)
1 compromised version
- Sep 27, 2023
Malicious code in react-fixtures (npm)
1 compromised version
- Sep 27, 2023
Malicious code in cm-react-components (npm)
- Sep 27, 2023
Malware in cm-react-components
1 compromised version
- Sep 26, 2023
Malicious code in @ltd2research/tldrequest (npm)
3 compromised versions
- Sep 26, 2023
Malicious code in ktarco1 (npm)
- Sep 26, 2023
Malicious code in ktarco (npm)
- Sep 26, 2023
Malicious code in arcotest2 (npm)
- Sep 26, 2023
Malicious code in arcotest1 (npm)
- Sep 26, 2023
Malware in arcotest1
1 compromised version
- Sep 26, 2023
Malware in ktarco1
1 compromised version
- Sep 26, 2023
Malware in ktarco
1 compromised version
- Sep 26, 2023
Malware in arcotest2
1 compromised version
- Sep 26, 2023
Malicious code in @bootsantos/bootsantos (npm)
- Sep 26, 2023
Malware in @bootsantos/bootsantos
1 compromised version
- Sep 26, 2023
Malicious code in banglamart-module (npm)
- Sep 26, 2023
Malware in banglamart-module
1 compromised version
- Sep 26, 2023
Malicious code in fca-priyansh3 (npm)
- Sep 26, 2023
Malicious code in fca-priyansh1 (npm)
Page 6814 of 7,305