Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- Sep 18, 2023
Malicious code in pmd-github-action (npm)
4 compromised versions
- Sep 18, 2023
Malicious code in not-a-math (npm)
1 compromised version
- Sep 18, 2023
Malicious code in @apps-common/ui-theme (npm)
1 compromised version
- Sep 18, 2023
Malicious code in thinhdz2001-fb (npm)
- Sep 18, 2023
Malicious code in thinhdz2001-api (npm)
- Sep 18, 2023
Malicious code in thinhdz-fb (npm)
- Sep 18, 2023
Malicious code in thinhdz-chat-api (npm)
- Sep 18, 2023
Malicious code in thinhdz-api (npm)
- Sep 18, 2023
Malicious code in nvthinhdz-api (npm)
- Sep 18, 2023
Malicious code in nvthinh2001-api (npm)
- Sep 18, 2023
Malicious code in nvt2001-api (npm)
- Sep 18, 2023
Malicious code in master-vanthinh (npm)
- Sep 18, 2023
Malicious code in helyt (npm)
- Sep 18, 2023
Malicious code in fce-vanthinh (npm)
- Sep 18, 2023
Malicious code in fca-nvt (npm)
- Sep 18, 2023
Malicious code in fca-bucu (npm)
- Sep 18, 2023
Malware in fca-bucu
1 compromised version
- Sep 18, 2023
Malware in nvthinh2001-api
1 compromised version
- Sep 18, 2023
Malware in thinhdz2001-fb
1 compromised version
- Sep 18, 2023
Malware in nvthinhdz-api
1 compromised version
- Sep 18, 2023
Malware in thinhdz-chat-api
1 compromised version
- Sep 18, 2023
Malware in helyt
1 compromised version
- Sep 18, 2023
Malware in thinhdz-fb
1 compromised version
- Sep 18, 2023
Malware in fce-vanthinh
1 compromised version
- Sep 18, 2023
Malware in thinhdz-api
1 compromised version
- Sep 18, 2023
Malware in nvt2001-api
1 compromised version
- Sep 18, 2023
Malware in thinhdz2001-api
1 compromised version
- Sep 18, 2023
Malware in fca-nvt
1 compromised version
- Sep 18, 2023
Malware in master-vanthinh
1 compromised version
- Sep 18, 2023
Malicious code in fca_kaizen (npm)
1 compromised version
- Sep 18, 2023
Malicious code in fca-reygie-harizon (npm)
1 compromised version
- Sep 18, 2023
Malicious code in fca-giee-harizon (npm)
1 compromised version
- Sep 18, 2023
Malware in fca_kaizen
1 compromised version
- Sep 18, 2023
Malware in fca-giee-harizon
1 compromised version
- Sep 18, 2023
Malware in fca-reygie-harizon
1 compromised version
- Sep 18, 2023
Malicious code in @abdullarahaman/fca-arya-api (npm)
- Sep 18, 2023
Malware in @abdullarahaman/fca-arya-api
1 compromised version
- Sep 18, 2023
Malicious code in truffle-gas-report (npm)
- Sep 18, 2023
Malicious code in rodashe (npm)
- Sep 18, 2023
Malicious code in loudashe (npm)
- Sep 18, 2023
Malicious code in lodarshe (npm)
- Sep 18, 2023
Malicious code in hardhat-gas-tracer (npm)
- Sep 18, 2023
Malicious code in hardhat-gas-report (npm)
- Sep 18, 2023
Malicious code in hardhat-contract-size (npm)
- Sep 18, 2023
Malicious code in hadhat-contract-sizer (npm)
- Sep 18, 2023
Malicious code in etheres.js (npm)
- Sep 18, 2023
Malicious code in eterscan-api (npm)
- Sep 18, 2023
Malicious code in eters.js (npm)
- Sep 18, 2023
Malicious code in eteres (npm)
- Sep 18, 2023
Malware in eters.js
1 compromised version
Page 6818 of 7,305