Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- Apr 18, 2023
Malicious code in proxyscrap (npm)
- Apr 18, 2023
Malicious code in node-click (npm)
- Apr 18, 2023
Malicious code in jutsulepb- (npm)
- Apr 18, 2023
Malware in proxyscrap
1 compromised version
- Apr 18, 2023
Malware in node-click
1 compromised version
- Apr 18, 2023
Malware in jutsulepb-
1 compromised version
- Apr 17, 2023
Malicious code in mm-docs-v-2 (npm)
1 compromised version
- Apr 17, 2023
Malicious code in dreamteam11-google (npm)
1 compromised version
- Apr 17, 2023
Malware in dreamteam11-google
1 compromised version
- Apr 17, 2023
Malicious code in dreamteam11-google-tech (npm)
1 compromised version
- Apr 17, 2023
Malicious code in dreamteam11-google-oast (npm)
1 compromised version
- Apr 17, 2023
Malware in dreamteam11-google-tech
1 compromised version
- Apr 17, 2023
Malware in dreamteam11-google-oast
1 compromised version
- Apr 17, 2023
Malicious code in ajaxmanager-custom (npm)
1 compromised version
- Apr 13, 2023
Malicious code in fca-zach-remade (npm)
- Apr 13, 2023
Malicious code in zach-remadee (npm)
- Apr 13, 2023
Malicious code in zach-remade (npm)
- Apr 13, 2023
Malware in zach-remadee
1 compromised version
- Apr 13, 2023
Malware in zach-remade
1 compromised version
- Apr 13, 2023
Malware in fca-zach-remade
1 compromised version
- Apr 12, 2023
Malicious code in testpackyeaaaa (npm)
- Apr 12, 2023
Malware in testpackyeaaaa
1 compromised version
- Apr 12, 2023
Malicious code in bleeding-edge-css (npm)
7 compromised versions
- Apr 12, 2023
Malware in bleeding-edge-css
1 compromised version
- Apr 12, 2023
Malicious code in smarttv-screen (npm)
3 compromised versions
- Apr 12, 2023
Malicious code in ynodejs_mod_log (npm)
4 compromised versions
- Apr 12, 2023
Malware in ynodejs_mod_log
1 compromised version
- Apr 12, 2023
Malware in smarttv-screen
1 compromised version
- Apr 12, 2023
Malicious code in uploadcare-wordpress (npm)
1 compromised version
- Apr 12, 2023
Malicious code in uploadcare-tinymce (npm)
1 compromised version
- Apr 12, 2023
Malicious code in uploadcare-redactor (npm)
1 compromised version
- Apr 12, 2023
Malicious code in uploadcare-jotform-widget (npm)
1 compromised version
- Apr 12, 2023
Malicious code in sushi-ui-web (npm)
1 compromised version
- Apr 12, 2023
Malicious code in meteor-uploadcare-widget-demo (npm)
- Apr 12, 2023
Malicious code in gatsby-remark-images-uploadcare (npm)
1 compromised version
- Apr 12, 2023
Malicious code in fancode-fc-tools (npm)
1 compromised version
- Apr 12, 2023
Malicious code in dream11-fc-icons (npm)
1 compromised version
- Apr 12, 2023
Malicious code in deskpro-notifications-service (npm)
- Apr 12, 2023
Malicious code in com.example.show-toast (npm)
1 compromised version
- Apr 12, 2023
Malicious code in checkout-demo-extension (npm)
1 compromised version
- Apr 12, 2023
Malware in uploadcare-wordpress
1 compromised version
- Apr 12, 2023
Malware in meteor-uploadcare-widget-demo
1 compromised version
- Apr 12, 2023
Malware in gatsby-remark-images-uploadcare
1 compromised version
- Apr 12, 2023
Malware in uploadcare-jotform-widget
1 compromised version
- Apr 12, 2023
Malware in checkout-demo-extension
1 compromised version
- Apr 12, 2023
Malware in sushi-ui-web
1 compromised version
- Apr 12, 2023
Malware in fancode-fc-tools
1 compromised version
- Apr 12, 2023
Malware in deskpro-notifications-service
1 compromised version
- Apr 12, 2023
Malware in dream11-fc-icons
1 compromised version
- Apr 12, 2023
Malware in uploadcare-redactor
1 compromised version
Page 6861 of 7,305