Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- Mar 15, 2023
Malicious code in cms-ui-components (npm)
9 compromised versions
- Mar 15, 2023
Malicious code in cms-typed-promise (npm)
8 compromised versions
- Mar 15, 2023
Malicious code in cms-serviceclients-extensions (npm)
8 compromised versions
- Mar 15, 2023
Malicious code in cms-serviceclients (npm)
8 compromised versions
- Mar 15, 2023
Malicious code in cms-models (npm)
8 compromised versions
- Mar 15, 2023
Malicious code in cms-external-datajs (npm)
8 compromised versions
- Mar 15, 2023
Malicious code in cms-businesslogic-extensions (npm)
8 compromised versions
- Mar 15, 2023
Malicious code in cms-businesslogic (npm)
8 compromised versions
- Mar 15, 2023
Malicious code in clientcore-onesrv-serviceclients (npm)
8 compromised versions
- Mar 15, 2023
Malicious code in clientcore-onesrv-businesslogic (npm)
8 compromised versions
- Mar 15, 2023
Malicious code in clientcore-models-catalyst (npm)
8 compromised versions
- Mar 15, 2023
Malicious code in clientcore-catalyst-businesslogic (npm)
8 compromised versions
- Mar 15, 2023
Malicious code in clientcore-base-serviceclients (npm)
8 compromised versions
- Mar 15, 2023
Malicious code in clientcore-base-businesslogic (npm)
8 compromised versions
- Mar 15, 2023
Malware in clientcore-base-businesslogic
1 compromised version
- Mar 15, 2023
Malware in cms-typed-promise
1 compromised version
- Mar 15, 2023
Malware in react-advanced-breadcrumbs
1 compromised version
- Mar 15, 2023
Malware in clientcore-catalyst-businesslogic
1 compromised version
- Mar 15, 2023
Malware in cms-businesslogic
1 compromised version
- Mar 15, 2023
Malware in cms-ui-redux
1 compromised version
- Mar 15, 2023
Malware in cms-ui-components
1 compromised version
- Mar 15, 2023
Malware in cms-businesslogic-extensions
1 compromised version
- Mar 15, 2023
Malware in devcenter-internal-stable
1 compromised version
- Mar 15, 2023
Malware in fluent-ui-react-latest
1 compromised version
- Mar 15, 2023
Malware in clientcore-onesrv-businesslogic
1 compromised version
- Mar 15, 2023
Malware in clientcore-models-catalyst
1 compromised version
- Mar 15, 2023
Malware in ts-infra-common
1 compromised version
- Mar 15, 2023
Malware in react-screen-reader-announce
1 compromised version
- Mar 15, 2023
Malware in cms-serviceclients
1 compromised version
- Mar 15, 2023
Malware in devcenter-internal-beta
1 compromised version
- Mar 15, 2023
Malware in cms-serviceclients-extensions
1 compromised version
- Mar 15, 2023
Malware in clientcore-base-serviceclients
1 compromised version
- Mar 15, 2023
Malware in cms-ui-views
1 compromised version
- Mar 15, 2023
Malware in ngx-infinite-scroll-fixed
1 compromised version
- Mar 15, 2023
Malware in clientcore-onesrv-serviceclients
1 compromised version
- Mar 15, 2023
Malware in cms-models
1 compromised version
- Mar 15, 2023
Malware in cms-ui-presentationlogic
1 compromised version
- Mar 15, 2023
Malware in cms-external-datajs
1 compromised version
- Mar 15, 2023
Malware in npo-common
1 compromised version
- Mar 12, 2023
Malicious code in rawrequest (PyPI)
- Mar 12, 2023
Malicious code in tpcraftcraftencode (PyPI)
- Mar 12, 2023
Malicious code in selfvisapaypalmine (PyPI)
- Mar 12, 2023
Malicious code in esqguiproofad (PyPI)
- Mar 12, 2023
Malicious code in selfmccontrolstudy (PyPI)
- Mar 12, 2023
Malicious code in py-controlpingcraft (PyPI)
- Mar 12, 2023
Malicious code in esqccpongcpu (PyPI)
- Mar 12, 2023
Malicious code in tpcvadlib (PyPI)
- Mar 12, 2023
Malicious code in libguireplaceram (PyPI)
- Mar 12, 2023
Malicious code in libguigrandmc (PyPI)
- Mar 12, 2023
Malicious code in esqccstringmask (PyPI)
Page 6866 of 7,305