Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- Sep 1, 2023
Malware in eforemon
1 compromised version
- Aug 31, 2023
Malicious code in metronome-ui (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in wallet-switch-chain (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in repsol-uikit (npm)
3 compromised versions
- Aug 31, 2023
Malicious code in wallet-watch-asset (npm)
1 compromised version
- Aug 31, 2023
Malicious code in web3-provider-patchers (npm)
1 compromised version
- Aug 31, 2023
Malicious code in wallet-add-chain (npm)
1 compromised version
- Aug 31, 2023
Malicious code in eforemon (npm)
1 compromised version
- Aug 31, 2023
Malicious code in emonn-test (npm)
1 compromised version
- Aug 31, 2023
Malicious code in mc-dxp (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in mmolecule-sqs (npm)
2 compromised versions
- Aug 31, 2023
Malware in mmolecule-sqs
1 compromised version
- Aug 31, 2023
Malicious code in mmolecule-redis (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in mmolecule-pm2-metrics (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in mmolecule-mysql (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in mmolecule-mongo (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in mmolecule-logger (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in mmolecule-jwt (npm)
2 compromised versions
- Aug 31, 2023
Malware in mmolecule-redis
1 compromised version
- Aug 31, 2023
Malware in mmolecule-mysql
1 compromised version
- Aug 31, 2023
Malware in mmolecule-mongo
1 compromised version
- Aug 31, 2023
Malware in mmolecule-pm2-metrics
1 compromised version
- Aug 31, 2023
Malware in mmolecule-jwt
1 compromised version
- Aug 31, 2023
Malware in mmolecule-logger
1 compromised version
- Aug 31, 2023
Malicious code in react-navigation-core (npm)
3 compromised versions
- Aug 31, 2023
Malicious code in react-navigation-area-view (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in mmolecule-httprequester (npm)
2 compromised versions
- Aug 31, 2023
Malicious code in mmolecule-elasticsearch (npm)
2 compromised versions
- Aug 31, 2023
Malware in mmolecule-elasticsearch
1 compromised version
- Aug 31, 2023
Malware in react-navigation-core
1 compromised version
- Aug 31, 2023
Malware in react-navigation-area-view
1 compromised version
- Aug 31, 2023
Malware in mmolecule-httprequester
1 compromised version
- Aug 31, 2023
Malicious code in @manomano-internal/toolbox-pkg-components (npm)
3 compromised versions
- Aug 31, 2023
Malware in @manomano-internal/toolbox-pkg-components
1 compromised version
- Aug 31, 2023
Malicious code in @manomano-internal/mf-seller-xp-commons-objects (npm)
3 compromised versions
- Aug 31, 2023
Malware in @manomano-internal/mf-seller-xp-commons-objects
1 compromised version
- Aug 31, 2023
Malicious code in @manomano-internal/mf-seller-xp-commons-module-scanner (npm)
3 compromised versions
- Aug 31, 2023
Malware in @manomano-internal/mf-seller-xp-commons-module-scanner
1 compromised version
- Aug 31, 2023
Malicious code in @manomano-internal/mf-seller-xp-commons-error-handlers (npm)
3 compromised versions
- Aug 31, 2023
Malware in @manomano-internal/mf-seller-xp-commons-error-handlers
1 compromised version
- Aug 30, 2023
Malicious code in nequi-aws-sqs (npm)
1 compromised version
- Aug 30, 2023
Malicious code in sb_chatbot_ui (npm)
1 compromised version
- Aug 29, 2023
Malicious code in apirsagenerator (npm)
1 compromised version
- Aug 29, 2023
Malicious code in @cybs-ui/components (npm)
1 compromised version
- Aug 29, 2023
Malicious code in remove-bg-cli (npm)
1 compromised version
- Aug 29, 2023
Malicious code in twentynineteen (npm)
2 compromised versions
- Aug 29, 2023
Malicious code in dcdemo-private (npm)
- Aug 29, 2023
Malware in dcdemo-private
1 compromised version
- Aug 29, 2023
Malicious code in @apex-ui/core (npm)
- Aug 29, 2023
Malware in @apex-ui/core
1 compromised version
Page 6823 of 7,305