Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,747 total · sorted newest first- May 9, 2023
Malware in oj-mithril-packages
1 compromised version
- May 9, 2023
Malware in oj-form-helper
1 compromised version
- May 9, 2023
Malware in viihdeonline-shared-components
1 compromised version
- May 9, 2023
Malware in mapi-js
1 compromised version
- May 9, 2023
Malware in oj-cropper
1 compromised version
- May 9, 2023
Malware in dojo-common
1 compromised version
- May 9, 2023
Malicious code in discord-sp (npm)
- May 9, 2023
Malware in discord-sp
1 compromised version
- May 9, 2023
Malicious code in foofoo (npm)
- May 9, 2023
Malware in foofoo
1 compromised version
- May 9, 2023
Malicious code in jannah-client (npm)
- May 9, 2023
Malware in jannah-client
1 compromised version
- May 9, 2023
Malicious code in burningskyme (npm)
- May 9, 2023
Malware in burningskyme
1 compromised version
- May 9, 2023
Malicious code in experimental-entrevista-react-01 (npm)
- May 9, 2023
Malware in serverless-action
1 compromised version
- May 9, 2023
Malware in experimental-entrevista-react-01
1 compromised version
- May 9, 2023
Malware in pcorbr-ui-framework
1 compromised version
- May 9, 2023
Malware in santander-portal-node-library
1 compromised version
- May 9, 2023
Malware in pcorbr-dlb
1 compromised version
- May 9, 2023
Malware in font-forno
1 compromised version
- May 9, 2023
Malicious code in auth-test-backend (npm)
1 compromised version
- May 9, 2023
Malware in auth-test-backend
1 compromised version
- May 9, 2023
Malicious code in node-red-contrib-tfjs-object-detection (npm)
1 compromised version
- May 9, 2023
Malware in node-red-contrib-tfjs-object-detection
1 compromised version
- May 9, 2023
Malicious code in seadrop (npm)
1 compromised version
- May 9, 2023
Malware in seadrop
1 compromised version
- May 9, 2023
Malicious code in seafoam-desktop (npm)
1 compromised version
- May 9, 2023
Malicious code in paycom-events (npm)
1 compromised version
- May 9, 2023
Malicious code in @clearing/noway (npm)
1 compromised version
- May 9, 2023
Malicious code in cyclotron-svc (npm)
2 compromised versions
- May 9, 2023
Malicious code in groovy.sql.sql (npm)
1 compromised version
- May 9, 2023
Malware in groovy.sql.sql
1 compromised version
- May 9, 2023
Malicious code in superset.connectors.druid.models (npm)
1 compromised version
- May 9, 2023
Malicious code in org.slf4j.logger (npm)
1 compromised version
- May 9, 2023
Malware in org.slf4j.logger
1 compromised version
- May 9, 2023
Malware in superset.connectors.druid.models
1 compromised version
- May 9, 2023
Malicious code in apitelegraf (npm)
- May 9, 2023
Malware in apitelegraf
1 compromised version
- May 9, 2023
Malicious code in anf-core-react (npm)
10 compromised versions
- May 9, 2023
Malware in anf-core-react
1 compromised version
- May 9, 2023
Malicious code in recurrence-formatter (npm)
11 compromised versions
- May 9, 2023
Malicious code in react-onei (npm)
3 compromised versions
- May 9, 2023
Malicious code in react-ob1 (npm)
1 compromised version
- May 9, 2023
Malicious code in react-miscrosoft-ui (npm)
- May 9, 2023
Malicious code in react-miscosoft-ui (npm)
- May 9, 2023
Malicious code in react-microsoft-ui (npm)
1 compromised version
- May 9, 2023
Malicious code in react-blue-ui (npm)
2 compromised versions
- May 9, 2023
Malicious code in react-0b1 (npm)
2 compromised versions
- May 9, 2023
Malware in react-miscrosoft-ui
1 compromised version
Page 6845 of 7,295