Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- Jul 17, 2023
Malicious code in all-in-one-web-header-footer (npm)
- Jul 17, 2023
Malware in all-in-one-web-header-footer
1 compromised version
- Jul 17, 2023
Malicious code in sssssssignalr-temp-client (npm)
- Jul 17, 2023
Malware in signalr-temp-client
1 compromised version
- Jul 17, 2023
Malware in sssssssignalr-temp-client
1 compromised version
- Jul 17, 2023
Malware in n-messaging-client
1 compromised version
- Jul 17, 2023
Malicious code in @hubportal/sdk (npm)
1 compromised version
- Jul 17, 2023
Malware in sportsbook-env-generator
1 compromised version
- Jul 17, 2023
Malicious code in @marcomayo.com/firefly-shared-js (npm)
2 compromised versions
- Jul 17, 2023
Malicious code in firefly-shared-js (npm)
- Jul 17, 2023
Malicious code in chegg-contentful (npm)
1 compromised version
- Jul 16, 2023
Malicious code in openai-beta (npm)
1 compromised version
- Jul 16, 2023
Malicious code in naveen4gem (RubyGems)
1 compromised version
- Jul 16, 2023
Malicious code in signalr-temp-client (npm)
1 compromised version
- Jul 16, 2023
Malicious code in n-messaging-client (npm)
5 compromised versions
- Jul 15, 2023
Malicious code in nextcloud-api-sdk (npm)
1 compromised version
- Jul 15, 2023
Malicious code in naveengem (RubyGems)
1 compromised version
- Jul 14, 2023
Malicious code in coingecko-prices (npm)
1 compromised version
- Jul 14, 2023
Malware in coingecko-prices
1 compromised version
- Jul 14, 2023
Malware in binance-prices
1 compromised version
- Jul 14, 2023
Malware in assets-table
1 compromised version
- Jul 14, 2023
Malware in assets-graph
1 compromised version
- Jul 14, 2023
Malicious code in sportsbook-env-generator (npm)
1 compromised version
- Jul 14, 2023
Malicious code in redox-demo-app (npm)
- Jul 14, 2023
Malicious code in proof-of-solvency-verification (npm)
- Jul 14, 2023
Malicious code in presto-webui (npm)
- Jul 14, 2023
Malicious code in identity-management (npm)
- Jul 14, 2023
Malware in identity-management
1 compromised version
- Jul 14, 2023
Malware in redox-demo-app
1 compromised version
- Jul 14, 2023
Malware in proof-of-solvency-verification
1 compromised version
- Jul 14, 2023
Malware in presto-webui
1 compromised version
- Jul 14, 2023
Malicious code in williams-quest (npm)
- Jul 14, 2023
Malicious code in afterpay (npm)
- Jul 14, 2023
Malicious code in smooch-api-quickstart-example (npm)
- Jul 14, 2023
Malicious code in rudder-analytics-js-sdk-sanity-suite (npm)
- Jul 14, 2023
Malicious code in perimeterx-fastly-js-edge-template (npm)
- Jul 14, 2023
Malicious code in mailmason (npm)
- Jul 14, 2023
Malicious code in fr-config-packages (npm)
- Jul 14, 2023
Malicious code in foxy.io-serverless-functions-on-netlify-demo (npm)
- Jul 14, 2023
Malicious code in concord-console (npm)
- Jul 14, 2023
Malicious code in braze-webpack-sample (npm)
- Jul 14, 2023
Malware in afterpay
1 compromised version
- Jul 14, 2023
Malware in braze-webpack-sample
1 compromised version
- Jul 14, 2023
Malware in rudder-analytics-js-sdk-sanity-suite
1 compromised version
- Jul 14, 2023
Malware in mailmason
1 compromised version
- Jul 14, 2023
Malware in perimeterx-fastly-js-edge-template
1 compromised version
- Jul 14, 2023
Malware in smooch-api-quickstart-example
1 compromised version
- Jul 14, 2023
Malware in concord-console
1 compromised version
- Jul 14, 2023
Malware in williams-quest
1 compromised version
- Jul 14, 2023
Malware in foxy.io-serverless-functions-on-netlify-demo
1 compromised version
Page 6836 of 7,305