Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- Sep 21, 2023
Malware in @zettle-bo/shell
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/react-router-dom (npm)
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/inventory (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/inventory
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/react-router-dom
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/routes (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/routes
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/react (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/react
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/capital (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/capital
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/vertical-navigation (npm)
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/products (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/products
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/vertical-navigation
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/sales-trends (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/sales-trends
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/direct-debit (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/direct-debit
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/bank-settings (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/bank-settings
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/receipts (npm)
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/cash-register (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/receipts
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/cash-register
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/invoices (npm)
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/integrations (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/integrations
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/invoices
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/bootstrapper (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/bootstrapper
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/react-spa (npm)
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/account-statement (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/react-spa
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/account-statement
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/staff-account (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/staff-account
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/settings (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/settings
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/account-settings (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/account-settings
1 compromised version
- Sep 21, 2023
Malicious code in sentrybrowser5 (npm)
- Sep 21, 2023
Malware in sentrybrowser5
1 compromised version
- Sep 20, 2023
Malicious code in test-package-ings (npm)
1 compromised version
- Sep 20, 2023
Malware in pingserver-test.01
1 compromised version
- Sep 20, 2023
Malicious code in scoot-layout-components (npm)
1 compromised version
- Sep 20, 2023
Malicious code in agopoweryea123 (npm)
2 compromised versions
- Sep 20, 2023
Malware in agopoweryea123
1 compromised version
- Sep 20, 2023
Malware in scoot-layout-components
1 compromised version
- Sep 20, 2023
Malware in symphony-monorepo
1 compromised version
Page 6816 of 7,305