Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- Aug 1, 2023
Malicious code in aurora-config (npm)
- Aug 1, 2023
Malware in eslint-plugin-scp-custom-rules
1 compromised version
- Aug 1, 2023
Malware in aurora-config
1 compromised version
- Aug 1, 2023
Malware in eslint-config-scp-custom-rules
1 compromised version
- Aug 1, 2023
Malware in storyblok-bridge
1 compromised version
- Aug 1, 2023
Malware in yatai-web-ui
1 compromised version
- Aug 1, 2023
Malicious code in binarium-client (npm)
5 compromised versions
- Jul 31, 2023
Malicious code in command-launcher (npm)
1 compromised version
- Jul 31, 2023
Malicious code in coinbase-wallet-sdk (npm)
2 compromised versions
- Jul 31, 2023
Malicious code in stranger-strings-functions (npm)
1 compromised version
- Jul 31, 2023
Malicious code in @ikea-aoa/component-text (npm)
- Jul 31, 2023
Malware in @ikea-aoa/component-text
1 compromised version
- Jul 31, 2023
Malicious code in elastic-internal (npm)
- Jul 31, 2023
Malware in elastic-internal
1 compromised version
- Jul 31, 2023
Malicious code in fca-tpk05-v2 (npm)
- Jul 31, 2023
Malware in fca-tpk05-v2
1 compromised version
- Jul 31, 2023
Malicious code in globalhackaton (npm)
1 compromised version
- Jul 31, 2023
Malicious code in orbit-themer (npm)
1 compromised version
- Jul 31, 2023
Malicious code in scoot-tracking (npm)
3 compromised versions
- Jul 31, 2023
Malicious code in test-hacker-sharma (npm)
- Jul 31, 2023
Malicious code in stitch-fix-men (npm)
- Jul 31, 2023
Malware in stitch-fix-men
1 compromised version
- Jul 31, 2023
Malware in test-hacker-sharma
1 compromised version
- Jul 31, 2023
Malicious code in trino-webui (npm)
- Jul 31, 2023
Malicious code in superset-cypress (npm)
- Jul 31, 2023
Malicious code in react-toolbox-docs (npm)
- Jul 31, 2023
Malicious code in ory-hydra-mock-oauth2-client (npm)
- Jul 31, 2023
Malicious code in docusaurus-template (npm)
- Jul 31, 2023
Malicious code in docusaurus-plugin-matamo (npm)
- Jul 31, 2023
Malware in docusaurus-plugin-matamo
1 compromised version
- Jul 31, 2023
Malware in trino-webui
1 compromised version
- Jul 31, 2023
Malware in ory-hydra-mock-oauth2-client
1 compromised version
- Jul 31, 2023
Malware in docusaurus-template
1 compromised version
- Jul 31, 2023
Malware in superset-cypress
1 compromised version
- Jul 31, 2023
Malware in react-toolbox-docs
1 compromised version
- Jul 31, 2023
Malicious code in rhancis (npm)
- Jul 31, 2023
Malicious code in fca-rhancis-pogi (npm)
- Jul 31, 2023
Malicious code in fca-rhancis (npm)
- Jul 31, 2023
Malicious code in fca-rbtd (npm)
- Jul 31, 2023
Malicious code in fca-pogi (npm)
- Jul 31, 2023
Malicious code in ebtd (npm)
- Jul 31, 2023
Malware in fca-rbtd
1 compromised version
- Jul 31, 2023
Malware in fca-rhancis-pogi
1 compromised version
- Jul 31, 2023
Malware in fca-pogi
1 compromised version
- Jul 31, 2023
Malware in rhancis
1 compromised version
- Jul 31, 2023
Malware in fca-rhancis
1 compromised version
- Jul 31, 2023
Malware in ebtd
1 compromised version
- Jul 31, 2023
Malicious code in zip_achive_bp (npm)
- Jul 31, 2023
Malicious code in developer_backup_test532 (npm)
1 compromised version
- Jul 31, 2023
Malicious code in developer_backup_test531 (npm)
3 compromised versions
Page 6832 of 7,305