Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,834 total · sorted newest first- May 9, 2023
Malware in burningskyme
1 compromised version
- May 9, 2023
Malicious code in experimental-entrevista-react-01 (npm)
- May 9, 2023
Malware in serverless-action
1 compromised version
- May 9, 2023
Malware in experimental-entrevista-react-01
1 compromised version
- May 9, 2023
Malware in pcorbr-ui-framework
1 compromised version
- May 9, 2023
Malware in santander-portal-node-library
1 compromised version
- May 9, 2023
Malware in pcorbr-dlb
1 compromised version
- May 9, 2023
Malware in font-forno
1 compromised version
- May 9, 2023
Malicious code in auth-test-backend (npm)
1 compromised version
- May 9, 2023
Malware in auth-test-backend
1 compromised version
- May 9, 2023
Malicious code in node-red-contrib-tfjs-object-detection (npm)
1 compromised version
- May 9, 2023
Malware in node-red-contrib-tfjs-object-detection
1 compromised version
- May 9, 2023
Malicious code in seadrop (npm)
1 compromised version
- May 9, 2023
Malware in seadrop
1 compromised version
- May 9, 2023
Malicious code in seafoam-desktop (npm)
1 compromised version
- May 9, 2023
Malicious code in paycom-events (npm)
1 compromised version
- May 9, 2023
Malicious code in @clearing/noway (npm)
1 compromised version
- May 9, 2023
Malicious code in cyclotron-svc (npm)
2 compromised versions
- May 9, 2023
Malicious code in groovy.sql.sql (npm)
1 compromised version
- May 9, 2023
Malware in groovy.sql.sql
1 compromised version
- May 9, 2023
Malicious code in superset.connectors.druid.models (npm)
1 compromised version
- May 9, 2023
Malicious code in org.slf4j.logger (npm)
1 compromised version
- May 9, 2023
Malware in org.slf4j.logger
1 compromised version
- May 9, 2023
Malware in superset.connectors.druid.models
1 compromised version
- May 9, 2023
Malicious code in apitelegraf (npm)
- May 9, 2023
Malware in apitelegraf
1 compromised version
- May 9, 2023
Malicious code in anf-core-react (npm)
10 compromised versions
- May 9, 2023
Malware in anf-core-react
1 compromised version
- May 9, 2023
Malicious code in recurrence-formatter (npm)
11 compromised versions
- May 9, 2023
Malicious code in react-onei (npm)
3 compromised versions
- May 9, 2023
Malicious code in react-ob1 (npm)
1 compromised version
- May 9, 2023
Malicious code in react-miscrosoft-ui (npm)
- May 9, 2023
Malicious code in react-miscosoft-ui (npm)
- May 9, 2023
Malicious code in react-microsoft-ui (npm)
1 compromised version
- May 9, 2023
Malicious code in react-blue-ui (npm)
2 compromised versions
- May 9, 2023
Malicious code in react-0b1 (npm)
2 compromised versions
- May 9, 2023
Malware in react-miscrosoft-ui
1 compromised version
- May 9, 2023
Malware in react-onei
1 compromised version
- May 9, 2023
Malware in react-miscosoft-ui
1 compromised version
- May 9, 2023
Malware in react-microsoft-ui
1 compromised version
- May 9, 2023
Malware in react-ob1
1 compromised version
- May 9, 2023
Malware in react-0b1
1 compromised version
- May 9, 2023
Malware in react-blue-ui
1 compromised version
- May 9, 2023
Malware in recurrence-formatter
1 compromised version
- May 9, 2023
Malicious code in visual_studio_1_37_1_crack_top_activation_key_latest_2019_win_mac__2rl (npm)
- May 9, 2023
Malicious code in vagcomfullversioncrack_verified_r3k2h (npm)
- May 9, 2023
Malicious code in angra_temple_of_shadows_songbook_pdf_105_kssry (npm)
- MAL-2023-619Malwarenpmnetwork_security_private_communication_in_a_public_world_solution_manual_pdfzip_best__0smMay 9, 2023
Malicious code in network_security_private_communication_in_a_public_world_solution_manual_pdfzip_best__0sm (npm)
- May 9, 2023
Malicious code in marathi_chawat_katha_mck_comics_by_24_gw97 (npm)
- May 9, 2023
Malicious code in kvs_availability_tool_registration_code_crack_work_zj (npm)
Page 6847 of 7,297