Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- Aug 28, 2023
Malware in @intact-lab/ngx-iceberg
1 compromised version
- Aug 27, 2023
Malicious code in twentytwenty (npm)
1 compromised version
- Aug 27, 2023
Malicious code in helio_tawa (npm)
3 compromised versions
- Aug 27, 2023
Malicious code in aws-encryption-sdk-javascript (npm)
1 compromised version
- Aug 27, 2023
Malicious code in yoga-repo (npm)
2 compromised versions
- Aug 26, 2023
Malicious code in cms-datocms (npm)
1 compromised version
- Aug 26, 2023
Malicious code in ez-retro-server (npm)
1 compromised version
- Aug 26, 2023
Malicious code in hydra-consent-app-express (npm)
2 compromised versions
- Aug 25, 2023
Malicious code in payuangular (npm)
1 compromised version
- Aug 25, 2023
Malicious code in emails-helper (npm)
10 compromised versions
- Aug 25, 2023
Malicious code in mx-icon (npm)
2 compromised versions
- Aug 25, 2023
Malware in mx-icon
1 compromised version
- Aug 25, 2023
Malicious code in ux-authentication-auth0 (npm)
1 compromised version
- Aug 25, 2023
Malicious code in eslint-config-web3-base (npm)
3 compromised versions
- Aug 25, 2023
Malicious code in fca-donqdev (npm)
- Aug 25, 2023
Malware in fca-donqdev
1 compromised version
- Aug 25, 2023
Malicious code in fca-mdong-remake (npm)
- Aug 25, 2023
Malware in fca-mdong-remake
1 compromised version
- Aug 25, 2023
Malicious code in malfex_api (npm)
- Aug 25, 2023
Malware in malfex_api
1 compromised version
- Aug 25, 2023
Malware in gradient-function
1 compromised version
- Aug 25, 2023
Malicious code in prompt-line (npm)
- Aug 25, 2023
Malware in prompt-line
1 compromised version
- Aug 25, 2023
Malicious code in discord.js-selfbot-v14 (npm)
- Aug 25, 2023
Malware in discord.js-selfbot-v14
1 compromised version
- Aug 25, 2023
Malicious code in poctesthackerone (npm)
- Aug 25, 2023
Malware in poctesthackerone
1 compromised version
- Aug 24, 2023
Malicious code in website-frontend-cms (npm)
1 compromised version
- Aug 24, 2023
Malicious code in gapps-automation (npm)
1 compromised version
- Aug 24, 2023
Malicious code in happa (npm)
1 compromised version
- Aug 24, 2023
Malicious code in @dpdgroupuk/design-space-components (npm)
1 compromised version
- Aug 24, 2023
Malicious code in @dpdgroupuk/your-dpd-rest-api-client (npm)
1 compromised version
- Aug 24, 2023
Malicious code in platon-contract (npm)
1 compromised version
- Aug 24, 2023
Malicious code in devops-challenge (npm)
2 compromised versions
- Aug 24, 2023
Malicious code in dexalot-docs (npm)
1 compromised version
- Aug 24, 2023
Malicious code in hardhat-contract (npm)
2 compromised versions
- Aug 24, 2023
Malicious code in file-format-series-json-to-sketch (npm)
1 compromised version
- Aug 24, 2023
Malicious code in sketch-71-symbol-resync (npm)
1 compromised version
- Aug 24, 2023
Malicious code in sketch-ipsum (npm)
1 compromised version
- Aug 24, 2023
Malicious code in fca-zeid (npm)
22 compromised versions
- Aug 24, 2023
Malware in fca-zeid
1 compromised version
- Aug 24, 2023
Malicious code in cncf-interactive-landscape (npm)
5 compromised versions
- Aug 24, 2023
Malicious code in funcraft-api-v3 (npm)
4 compromised versions
- Aug 24, 2023
Malware in funcraft-api-v3
1 compromised version
- Aug 24, 2023
Malicious code in fca-orion (npm)
2 compromised versions
- Aug 24, 2023
Malware in fca-orion
1 compromised version
- Aug 24, 2023
Malicious code in fca-spbot (npm)
- Aug 24, 2023
Malware in fca-spbot
1 compromised version
- Aug 24, 2023
Malicious code in fca-supportbot (npm)
- Aug 24, 2023
Malware in fca-supportbot
1 compromised version
Page 6825 of 7,305