Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- Sep 5, 2023
Malware in jupiter-i18n
1 compromised version
- Sep 5, 2023
Malware in jupiter-emoji
1 compromised version
- Sep 5, 2023
Malware in fiji-core-framework
1 compromised version
- Sep 5, 2023
Malware in fiji-core-foundation
1 compromised version
- Sep 5, 2023
Malware in course-structure-debugger
1 compromised version
- Sep 5, 2023
Malicious code in dm_commons_utilities (npm)
- Sep 5, 2023
Malware in dm_commons_utilities
1 compromised version
- Sep 5, 2023
Malicious code in betterbit-frame-pkg (npm)
- Sep 5, 2023
Malware in web3-provider-patchers
1 compromised version
- Sep 5, 2023
Malware in metronome-synth-user-lib
1 compromised version
- Sep 5, 2023
Malware in master-oracle-lib
1 compromised version
- Sep 5, 2023
Malware in wallet-watch-asset
1 compromised version
- Sep 5, 2023
Malware in chain-list
1 compromised version
- Sep 5, 2023
Malware in vesper-synth-user-lib
1 compromised version
- Sep 5, 2023
Malware in metronome-ui
1 compromised version
- Sep 5, 2023
Malware in wallet-switch-chain
1 compromised version
- Sep 5, 2023
Malware in wallet-add-chain
1 compromised version
- Sep 5, 2023
Malware in metronome-synth-info-lib
1 compromised version
- Sep 5, 2023
Malware in betterbit-frame-pkg
1 compromised version
- Sep 5, 2023
Malicious code in @grabdefence/trust-feature-bank-ui (npm)
1 compromised version
- Sep 5, 2023
Malicious code in ccfedrtest-poc (npm)
1 compromised version
- Sep 3, 2023
Malicious code in testingoli (npm)
1 compromised version
- Sep 3, 2023
Malicious code in pingserver-test.01 (npm)
1 compromised version
- Sep 2, 2023
Malicious code in metronome-synth-user-lib (npm)
1 compromised version
- Sep 2, 2023
Malicious code in vesper-synth-user-lib (npm)
1 compromised version
- Sep 2, 2023
Malicious code in metronome-synth-info-lib (npm)
1 compromised version
- Sep 2, 2023
Malicious code in www-ankr-com (npm)
1 compromised version
- Sep 2, 2023
Malicious code in master-oracle-lib (npm)
1 compromised version
- Sep 2, 2023
Malicious code in chain-list (npm)
1 compromised version
- Sep 1, 2023
Malicious code in visual_components (npm)
6 compromised versions
- Sep 1, 2023
Malicious code in jupiter-opensdk (npm)
1 compromised version
- Sep 1, 2023
Malicious code in jupiter-i18n (npm)
1 compromised version
- Sep 1, 2023
Malicious code in fiji-core-foc (npm)
1 compromised version
- Sep 1, 2023
Malicious code in fiji-core-cryptopool (npm)
1 compromised version
- Sep 1, 2023
Malicious code in feature-flag-framework (npm)
1 compromised version
- Sep 1, 2023
Malicious code in fiji-core-foundation (npm)
1 compromised version
- Sep 1, 2023
Malicious code in fiji-core-framework (npm)
1 compromised version
- Sep 1, 2023
Malicious code in jupiter-emoji (npm)
1 compromised version
- Sep 1, 2023
Malicious code in alibabacloud-vpc20180317 (PyPI)
- Sep 1, 2023
Malicious code in alibabacloud-ecs20180317 (PyPI)
- Sep 1, 2023
Malicious code in course-structure-debugger (npm)
2 compromised versions
- Sep 1, 2023
Malicious code in emonnn-test (npm)
- Sep 1, 2023
Malicious code in emon78 (npm)
- Sep 1, 2023
Malicious code in emon-testt (npm)
- Sep 1, 2023
Malicious code in emon-test-emon (npm)
- Sep 1, 2023
Malware in emon78
1 compromised version
- Sep 1, 2023
Malware in emonnn-test
1 compromised version
- Sep 1, 2023
Malware in emon-test-emon
1 compromised version
- Sep 1, 2023
Malware in emonn-test
1 compromised version
- Sep 1, 2023
Malware in emon-testt
1 compromised version
Page 6822 of 7,305