Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- Jul 31, 2023
Malicious code in developer_backup_test529 (npm)
1 compromised version
- Jul 31, 2023
Malicious code in developer_backup_test528 (npm)
- Jul 31, 2023
Malicious code in developer_backup_test527 (npm)
1 compromised version
- Jul 31, 2023
Malicious code in developer_backup_test525 (npm)
1 compromised version
- Jul 31, 2023
Malicious code in developer_backup_test524 (npm)
3 compromised versions
- Jul 31, 2023
Malicious code in developer_backup_test523 (npm)
1 compromised version
- Jul 31, 2023
Malicious code in developer_backup_test522 (npm)
1 compromised version
- Jul 31, 2023
Malicious code in developer_backup_test521 (npm)
1 compromised version
- Jul 31, 2023
Malicious code in awell-libs (npm)
1 compromised version
- Jul 31, 2023
Malicious code in @rocketrefer/components (npm)
- Jul 31, 2023
Malicious code in @rocketrefer/admin-panel (npm)
4 compromised versions
- Jul 30, 2023
Malicious code in yatai-web-ui (npm)
1 compromised version
- Jul 30, 2023
Malicious code in azuretestpackage (npm)
2 compromised versions
- Jul 30, 2023
Malicious code in pypiele (PyPI)
2 compromised versions
- Jul 29, 2023
Malicious code in react-intl-cdo (npm)
1 compromised version
- Jul 29, 2023
Malicious code in @ikea-aoa/component-price-module (npm)
1 compromised version
- Jul 28, 2023
Malicious code in seaport-mobile (npm)
- Jul 28, 2023
Malicious code in grabathon-v8 (npm)
- Jul 28, 2023
Malicious code in coinbase-mobile (npm)
- Jul 28, 2023
Malware in seaport-mobile
1 compromised version
- Jul 28, 2023
Malware in coinbase-mobile
1 compromised version
- Jul 28, 2023
Malware in grabathon-v8
1 compromised version
- Jul 28, 2023
Malicious code in js-node-ethers (npm)
- Jul 28, 2023
Malicious code in ethersjs (npm)
- Jul 28, 2023
Malware in js-node-ethers
1 compromised version
- Jul 28, 2023
Malware in ethersjs
1 compromised version
- Jul 28, 2023
Malicious code in very-bad-transitive-pkg (npm)
- Jul 28, 2023
Malicious code in very-bad-pkg (npm)
- Jul 28, 2023
Malicious code in imposter-pkg-poc (npm)
- Jul 28, 2023
Malware in very-bad-pkg
1 compromised version
- Jul 28, 2023
Malware in very-bad-transitive-pkg
1 compromised version
- Jul 28, 2023
Malware in imposter-pkg-poc
1 compromised version
- Jul 28, 2023
Malicious code in b2b-canaisdigitais (npm)
10 compromised versions
- Jul 27, 2023
Malicious code in fca_ivan (npm)
- Jul 27, 2023
Malware in fca_ivan
1 compromised version
- Jul 27, 2023
Malicious code in fca-ivancotacte2 (npm)
- Jul 27, 2023
Malware in fca-ivancotacte2
1 compromised version
- Jul 27, 2023
Malicious code in fca-ivancotacte1 (npm)
- Jul 27, 2023
Malware in fca-ivancotacte1
1 compromised version
- Jul 27, 2023
Malicious code in fca-ivancotacte (npm)
- Jul 27, 2023
Malware in fca-ivancotacte
1 compromised version
- Jul 27, 2023
Malicious code in aws-sdk-js-v3 (npm)
1 compromised version
- Jul 27, 2023
Malicious code in dell-microapp-core-ng (npm)
1 compromised version
- Jul 27, 2023
Malicious code in gp-actions (npm)
1 compromised version
- Jul 27, 2023
Malicious code in gp-screens (npm)
1 compromised version
- Jul 27, 2023
Malicious code in tecno-new (npm)
1 compromised version
- Jul 27, 2023
Malicious code in some_crucial_web_app_new (npm)
2 compromised versions
- Jul 27, 2023
Malicious code in pear_vile (npm)
1 compromised version
- Jul 27, 2023
Malicious code in kiwi_vicious (npm)
1 compromised version
- Jul 27, 2023
Malicious code in cherry_corrupt (npm)
1 compromised version
Page 6833 of 7,305