Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- Jul 12, 2023
Malware in fca-nemg
1 compromised version
- Jul 12, 2023
Malicious code in fca-tuong (npm)
- Jul 12, 2023
Malware in fca-tuong
1 compromised version
- Jul 12, 2023
Malicious code in kteam (npm)
- Jul 12, 2023
Malicious code in fca-sasuke (npm)
- Jul 12, 2023
Malicious code in fca-mod-hrz (npm)
- Jul 12, 2023
Malicious code in fca-kenxi (npm)
- Jul 12, 2023
Malicious code in fb-chat-fca (npm)
- Jul 12, 2023
Malware in fca-sasuke
1 compromised version
- Jul 12, 2023
Malware in fca-mod-hrz
1 compromised version
- Jul 12, 2023
Malware in fca-kenxi
1 compromised version
- Jul 12, 2023
Malware in fb-chat-fca
1 compromised version
- Jul 12, 2023
Malware in kteam
1 compromised version
- Jul 12, 2023
Malicious code in fca-gminh-kizz (npm)
- Jul 12, 2023
Malware in fca-gminh-kizz
1 compromised version
- Jul 12, 2023
Malicious code in fhr-jake (npm)
- Jul 12, 2023
Malicious code in chalk-animate-cjs (npm)
- Jul 12, 2023
Malware in chalk-animate-cjs
1 compromised version
- Jul 12, 2023
Malware in fhr-jake
1 compromised version
- Jul 11, 2023
Malicious code in @sbb2b/ngx.sportsbook (npm)
6 compromised versions
- Jul 11, 2023
Malicious code in pretty-literal-test (npm)
- Jul 11, 2023
Malicious code in literal-fs (npm)
- Jul 11, 2023
Malware in literal-fs
1 compromised version
- Jul 11, 2023
Malware in pretty-literal-test
1 compromised version
- Jul 11, 2023
Malicious code in fca-tpk05 (npm)
- Jul 11, 2023
Malicious code in fca-tpk (npm)
- Jul 11, 2023
Malware in fca-tpk
1 compromised version
- Jul 11, 2023
Malware in fca-tpk05
1 compromised version
- Jul 11, 2023
Malicious code in kraken-prices (npm)
- Jul 11, 2023
Malicious code in btc-api-node (npm)
1 compromised version
- Jul 10, 2023
Malicious code in fca-anup (npm)
- Jul 10, 2023
Malware in fca-anup
1 compromised version
- Jul 10, 2023
Malicious code in salesforce-ux (npm)
1 compromised version
- Jul 10, 2023
Malicious code in metaflow-ui (npm)
- Jul 10, 2023
Malicious code in hamlit (npm)
- Jul 10, 2023
Malware in hamlit
1 compromised version
- Jul 10, 2023
Malware in metaflow-ui
1 compromised version
- Jul 10, 2023
Malware in @cima/prism-utils
1 compromised version
- Jul 10, 2023
Malicious code in fca-dongdev-remake (npm)
- Jul 10, 2023
Malware in fca-dongdev-remake
1 compromised version
- Jul 10, 2023
Malicious code in fca-dongdz (npm)
- Jul 10, 2023
Malicious code in fca-dongdev (npm)
- Jul 10, 2023
Malware in fca-dongdev
1 compromised version
- Jul 10, 2023
Malware in fca-dongdz
1 compromised version
- Jul 10, 2023
Malicious code in ecorp-secret-tool (npm)
- Jul 10, 2023
Malicious code in confusion-1337 (npm)
- Jul 10, 2023
Malware in ecorp-secret-tool
1 compromised version
- Jul 10, 2023
Malware in juno-branding
1 compromised version
- Jul 10, 2023
Malware in confusion-1337
1 compromised version
- Jul 10, 2023
Malicious code in eone-gui (npm)
Page 6838 of 7,305