Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- Jul 14, 2023
Malware in fr-config-packages
1 compromised version
- Jul 14, 2023
Malicious code in anjelo-developer (npm)
- Jul 14, 2023
Malicious code in anjelo-dev2 (npm)
- Jul 14, 2023
Malicious code in anjelo-dev (npm)
- Jul 14, 2023
Malicious code in fca-yukihira (npm)
- Jul 14, 2023
Malicious code in fca-jelongz (npm)
- Jul 14, 2023
Malicious code in fca-jelo (npm)
- Jul 14, 2023
Malicious code in fca-itadori (npm)
- Jul 14, 2023
Malicious code in fca-chand (npm)
- Jul 14, 2023
Malicious code in fca-anjelov5 (npm)
- Jul 14, 2023
Malicious code in fca-anjelov3 (npm)
- Jul 14, 2023
Malicious code in fca-anjelov2 (npm)
- Jul 14, 2023
Malicious code in fca-anjelocyo (npm)
- Jul 14, 2023
Malicious code in anjelo-pogi (npm)
- Jul 14, 2023
Malware in fca-yukihira
1 compromised version
- Jul 14, 2023
Malware in fca-anjelov3
1 compromised version
- Jul 14, 2023
Malware in fca-anjelov2
1 compromised version
- Jul 14, 2023
Malware in anjelo-dev2
1 compromised version
- Jul 14, 2023
Malware in fca-anjelov5
1 compromised version
- Jul 14, 2023
Malware in fca-jelo
1 compromised version
- Jul 14, 2023
Malware in anjelo-developer
1 compromised version
- Jul 14, 2023
Malware in anjelo-pogi
1 compromised version
- Jul 14, 2023
Malware in fca-jelongz
1 compromised version
- Jul 14, 2023
Malware in fca-chand
1 compromised version
- Jul 14, 2023
Malware in fca-anjelocyo
1 compromised version
- Jul 14, 2023
Malware in fca-itadori
1 compromised version
- Jul 14, 2023
Malware in anjelo-dev
1 compromised version
- Jul 14, 2023
Malicious code in fca-siwoo-remake (npm)
- Jul 14, 2023
Malware in fca-siwoo-remake
1 compromised version
- Jul 14, 2023
Malicious code in @leesiwoo/fca-horizon-remake (npm)
- Jul 14, 2023
Malware in @leesiwoo/fca-horizon-remake
1 compromised version
- Jul 14, 2023
Malicious code in hideorg-lvl (npm)
1 compromised version
- Jul 13, 2023
Malicious code in dontsweatthetechnique (npm)
2 compromised versions
- Jul 12, 2023
Malicious code in @region-lib/helper (npm)
1 compromised version
- Jul 12, 2023
Malicious code in @region-lib/env (npm)
1 compromised version
- Jul 12, 2023
Malicious code in trochilus (npm)
2 compromised versions
- Jul 12, 2023
Malicious code in barcodegeneratorqr (PyPI)
1 compromised version
- Jul 12, 2023
Malicious code in @obg/gtm.types (npm)
4 compromised versions
- Jul 12, 2023
Malicious code in 1password-postman-integration (npm)
1 compromised version
- Jul 12, 2023
Malicious code in @obg/ngx.global (npm)
1 compromised version
- Jul 12, 2023
Malicious code in cachedjsijdus.css (npm)
- Jul 12, 2023
Malware in cachedjsijdus.css
1 compromised version
- Jul 12, 2023
Malware in @sbb2b/ngx.sportsbook
1 compromised version
- Jul 12, 2023
Malicious code in fca-nguyen (npm)
- Jul 12, 2023
Malware in fca-nguyen
1 compromised version
- Jul 12, 2023
Malicious code in tools-fbs (npm)
- Jul 12, 2023
Malicious code in tools-fb (npm)
- Jul 12, 2023
Malware in tools-fbs
1 compromised version
- Jul 12, 2023
Malware in tools-fb
1 compromised version
- Jul 12, 2023
Malicious code in fca-nemg (npm)
Page 6837 of 7,305