Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- Sep 14, 2023
Malicious code in tv-front (npm)
1 compromised version
- Sep 14, 2023
Malicious code in ppreact7 (npm)
1 compromised version
- Sep 14, 2023
Malware in brum-global-variable
1 compromised version
- Sep 14, 2023
Malicious code in fca-dongsexx (npm)
- Sep 14, 2023
Malware in fca-dongsexx
1 compromised version
- Sep 14, 2023
Malicious code in purplebricks-frontend-core (npm)
- Sep 14, 2023
Malware in purplebricks-frontend-core
1 compromised version
- Sep 14, 2023
Malware in smeeh-administration
1 compromised version
- Sep 14, 2023
Malware in purplebricks-administration
1 compromised version
- Sep 13, 2023
Malicious code in healthbridge-design-system (npm)
1 compromised version
- Sep 13, 2023
Malicious code in brum-global-variable (npm)
1 compromised version
- Sep 13, 2023
Malicious code in smeeh-administration (npm)
1 compromised version
- Sep 13, 2023
Malicious code in purplebricks-administration (npm)
1 compromised version
- Sep 12, 2023
Malicious code in aws-consoler2 (PyPI)
- Sep 12, 2023
Malicious code in enumerate-iam (PyPI)
- Sep 12, 2023
Malicious code in shein-test (npm)
- Sep 12, 2023
Malicious code in cloud-message-sdks (npm)
- Sep 12, 2023
Malware in shein-test
1 compromised version
- Sep 12, 2023
Malware in cloud-message-sdks
1 compromised version
- Sep 12, 2023
Malicious code in pretty-array (npm)
1 compromised version
- Sep 12, 2023
Malware in pretty-array
1 compromised version
- Sep 12, 2023
Malicious code in xweb_3.0_util_lib (npm)
- Sep 12, 2023
Malicious code in xweb_3.0_rootlib (npm)
- Sep 12, 2023
Malicious code in xweb_3.0_component_lib (npm)
- Sep 12, 2023
Malware in xweb_3.0_util_lib
1 compromised version
- Sep 12, 2023
Malware in xweb_3.0_rootlib
1 compromised version
- Sep 12, 2023
Malware in xweb_3.0_component_lib
1 compromised version
- Sep 12, 2023
Malicious code in antdesignpro2021 (npm)
- Sep 12, 2023
Malware in antdesignpro2021
1 compromised version
- Sep 12, 2023
Malicious code in react-morning (npm)
- Sep 12, 2023
Malware in react-morning
1 compromised version
- Sep 12, 2023
Malware in npm-random-gen
1 compromised version
- Sep 11, 2023
Malicious code in @get-bridge/tapestry-sdk (npm)
1 compromised version
- Sep 11, 2023
Malicious code in @get-bridge/bridge-string-utils (npm)
1 compromised version
- Sep 11, 2023
Malicious code in solidity-tracer (npm)
- Sep 11, 2023
Malware in solidity-tracer
1 compromised version
- Sep 11, 2023
Malicious code in web3-react-core (npm)
- Sep 11, 2023
Malicious code in portal-env (npm)
- Sep 11, 2023
Malicious code in limitd-protocol (npm)
- Sep 11, 2023
Malicious code in compound-components (npm)
- Sep 11, 2023
Malware in portal-env
1 compromised version
- Sep 11, 2023
Malware in compound-components
1 compromised version
- Sep 11, 2023
Malware in limitd-protocol
1 compromised version
- Sep 11, 2023
Malware in web3-react-core
1 compromised version
- Sep 11, 2023
Malicious code in testingsomethingforscanner (npm)
- Sep 11, 2023
Malicious code in newtesttocheckscanner (npm)
- Sep 11, 2023
Malware in testingsomethingforscanner
1 compromised version
- Sep 11, 2023
Malware in newtesttocheckscanner
1 compromised version
- Sep 11, 2023
Malicious code in discord.js-selfv20 (npm)
- Sep 11, 2023
Malware in discord.js-selfv20
1 compromised version
Page 6820 of 7,305