Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- Aug 16, 2023
Malicious code in spark-math (npm)
1 compromised version
- Aug 16, 2023
Malicious code in irviewer (npm)
1 compromised version
- Aug 16, 2023
Malicious code in initial-app (npm)
1 compromised version
- Aug 16, 2023
Malicious code in olymptrade (npm)
- Aug 16, 2023
Malicious code in school-task-tester (npm)
8 compromised versions
- Aug 16, 2023
Malicious code in orbitplate (npm)
8 compromised versions
- Aug 16, 2023
Malicious code in hh-dep-monitoring (npm)
5 compromised versions
- Aug 16, 2023
Malicious code in career-service-client (npm)
8 compromised versions
- Aug 15, 2023
Malicious code in micro-module-test (npm)
1 compromised version
- Aug 15, 2023
Malicious code in leostorm (npm)
1 compromised version
- Aug 15, 2023
Malicious code in snapchat-test-package (npm)
1 compromised version
- Aug 15, 2023
Malicious code in flowtorch (npm)
1 compromised version
- Aug 15, 2023
Malicious code in tencentcloud-python-sdk (PyPI)
- Aug 15, 2023
Malicious code in youse-frontend (npm)
- Aug 15, 2023
Malware in youse-frontend
1 compromised version
- Aug 15, 2023
Malicious code in nayan-te (npm)
- Aug 15, 2023
Malicious code in nayan-remake-tr (npm)
- Aug 15, 2023
Malicious code in nayan-remake-h (npm)
- Aug 15, 2023
Malware in nayan-te
1 compromised version
- Aug 15, 2023
Malware in nayan-remake-tr
1 compromised version
- Aug 15, 2023
Malware in nayan-remake-h
1 compromised version
- Aug 15, 2023
Malicious code in nayan-remake-api (npm)
52 compromised versions
- Aug 15, 2023
Malware in nayan-remake-api
1 compromised version
- Aug 15, 2023
Malicious code in skills-strategy-client (npm)
- Aug 15, 2023
Malware in skills-strategy-client
1 compromised version
- Aug 15, 2023
Malicious code in hardhat-croned (npm)
- Aug 15, 2023
Malware in hardhat-croned
1 compromised version
- Aug 15, 2023
Malicious code in miro-api-clients (npm)
1 compromised version
- Aug 15, 2023
Malware in miro-api-clients
1 compromised version
- Aug 15, 2023
Malicious code in pyghoster (PyPI)
1 compromised version
- Aug 14, 2023
Malicious code in aliyun-oss2 (PyPI)
- Aug 14, 2023
Malicious code in python-aliyun-sdk-kms (PyPI)
- Aug 14, 2023
Malicious code in bugvsme (npm)
1 compromised version
- Aug 14, 2023
Malicious code in false-positive-reddit-rce (npm)
1 compromised version
- Aug 14, 2023
Malicious code in marvelmaniac-reddit-rce (npm)
3 compromised versions
- Aug 14, 2023
Malicious code in tianfengqwe (npm)
- Aug 14, 2023
Malware in tianfengqwe
1 compromised version
- Aug 14, 2023
Malicious code in 1ds-cli (npm)
- Aug 14, 2023
Malware in 1ds-cli
1 compromised version
- Aug 14, 2023
Malicious code in marketplace-ibm (npm)
- Aug 14, 2023
Malware in marketplace-ibm
1 compromised version
- Aug 14, 2023
Malicious code in square-apple-package (npm)
- Aug 14, 2023
Malware in square-apple-package
1 compromised version
- Aug 14, 2023
Malicious code in dependency-exploit-corraldev (npm)
- Aug 14, 2023
Malware in dependency-exploit-corraldev
1 compromised version
- Aug 14, 2023
Malicious code in ynf-dx-webpack-plugins (npm)
- Aug 14, 2023
Malicious code in ynf-dx-scripts (npm)
- Aug 14, 2023
Malicious code in ynf-core-renderer (npm)
- Aug 14, 2023
Malicious code in ynf-core-loader (npm)
- Aug 14, 2023
Malicious code in srm-front-util (npm)
Page 6828 of 7,305