Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- Sep 11, 2023
Malicious code in web3tool-validator (npm)
- Sep 11, 2023
Malicious code in web3tool-providers-ws (npm)
- Sep 11, 2023
Malicious code in web3tool-providers-http (npm)
- Sep 11, 2023
Malicious code in web3tool-eth-personal (npm)
- Sep 11, 2023
Malicious code in web3tool-eth-ens (npm)
- Sep 11, 2023
Malicious code in web3tool-eth-accounts (npm)
- Sep 11, 2023
Malicious code in web3tool-eth (npm)
- Sep 11, 2023
Malicious code in web3tool-core (npm)
- Sep 11, 2023
Malicious code in eth-web3-tx (npm)
- Sep 11, 2023
Malware in web3tool-core
1 compromised version
- Sep 11, 2023
Malware in web3tool-eth-personal
1 compromised version
- Sep 11, 2023
Malware in web3tool-providers-ws
1 compromised version
- Sep 11, 2023
Malware in web3tool-eth
1 compromised version
- Sep 11, 2023
Malware in web3tool-providers-http
1 compromised version
- Sep 11, 2023
Malware in web3tool-eth-ens
1 compromised version
- Sep 11, 2023
Malware in web3tool-validator
1 compromised version
- Sep 11, 2023
Malware in eth-web3-tx
1 compromised version
- Sep 11, 2023
Malware in web3tool-eth-accounts
1 compromised version
- Sep 11, 2023
Malicious code in @huoshanjiebai/curvess (npm)
- Sep 11, 2023
Malware in @huoshanjiebai/curvess
1 compromised version
- Sep 11, 2023
Malicious code in @huoshanjiebai/ethereumjs-utill (npm)
- Sep 11, 2023
Malware in @huoshanjiebai/ethereumjs-utill
1 compromised version
- Sep 11, 2023
Malicious code in ethereum-cryptograph (npm)
- Sep 11, 2023
Malware in ethereum-cryptograph
1 compromised version
- Sep 11, 2023
Malicious code in npm-random-gen (npm)
1 compromised version
- Sep 11, 2023
Malware in ysb-ui-services
1 compromised version
- Sep 11, 2023
Malware in ui-elements-icons
1 compromised version
- Sep 11, 2023
Malicious code in cxday (npm)
- Sep 11, 2023
Malware in cxday
1 compromised version
- Sep 11, 2023
Malicious code in aliababcloud-tea-openapi (PyPI)
- Sep 10, 2023
Malicious code in ysb-ui-services (npm)
2 compromised versions
- Sep 10, 2023
Malicious code in ui-elements-icons (npm)
4 compromised versions
- Sep 9, 2023
Malicious code in zara-mkt-core (npm)
2 compromised versions
- Sep 8, 2023
Malicious code in @operational-reporting/wire-contracts (npm)
1 compromised version
- Sep 7, 2023
Malicious code in chatbot-community (npm)
- Sep 7, 2023
Malware in chatbot-community
1 compromised version
- Sep 6, 2023
Malware in @grabdefence/trust-feature-bank-ui
1 compromised version
- Sep 6, 2023
Malicious code in @ks-radar/radar-error-collect (npm)
1 compromised version
- Sep 6, 2023
Malware in @ks-radar/radar-error-collect
1 compromised version
- Sep 6, 2023
Malicious code in @ks-radar/radar-resource-collect (npm)
- Sep 6, 2023
Malware in @ks-radar/radar-resource-collect
1 compromised version
- Sep 6, 2023
Malicious code in @ks-radar/radar-event-collect (npm)
- Sep 6, 2023
Malware in @ks-radar/radar-event-collect
1 compromised version
- Sep 5, 2023
Malicious code in ivr-payments (npm)
- Sep 5, 2023
Malware in mc-dxp
1 compromised version
- Sep 5, 2023
Malware in ivr-payments
1 compromised version
- Sep 5, 2023
Malware in jupiter-opensdk
1 compromised version
- Sep 5, 2023
Malware in feature-flag-framework
1 compromised version
- Sep 5, 2023
Malware in fiji-core-cryptopool
1 compromised version
- Sep 5, 2023
Malware in fiji-core-foc
1 compromised version
Page 6821 of 7,305