Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,123 total · sorted newest first- Feb 23, 2023
Malicious code in @pagseguro/ps-react-bootstrap (npm)
- Feb 23, 2023
Malicious code in @pagseguro/ps-logger (npm)
- Feb 23, 2023
Malicious code in @pagseguro/ps-crypt-js (npm)
- Feb 23, 2023
Malicious code in @pagseguro/ps-cart-recovery (npm)
- Feb 23, 2023
Malicious code in @pagseguro/ps-bootstrap (npm)
- Feb 23, 2023
Malicious code in @pagseguro/nest (npm)
- Feb 23, 2023
Malicious code in @pagseguro/eslint-config (npm)
- Feb 23, 2023
Malicious code in @pagseguro/axios-instance (npm)
- Feb 23, 2023
Malicious code in @pagseguro/pagseguro-utils (npm)
3 compromised versions
- Feb 22, 2023
Malicious code in @pagseguro/pagseguro-utils-test (npm)
1 compromised version
- Feb 21, 2023
Malware in flow-faucet
1 compromised version
- Feb 21, 2023
Malware in kuna-chart-header
1 compromised version
- Feb 21, 2023
Malware in prize-market
1 compromised version
- Feb 21, 2023
Malicious code in paysafe-wac-web-chatbot-lib-fe (npm)
- Feb 21, 2023
Malware in paysafe-wac-web-chatbot-lib-fe
1 compromised version
- Feb 20, 2023
Malicious code in jquery-mask (npm)
- Feb 20, 2023
Malicious code in fe-core-components-vuejs (npm)
- Feb 20, 2023
Malware in jquery-mask
1 compromised version
- Feb 20, 2023
Malware in fe-core-components-vuejs
1 compromised version
- Feb 20, 2023
Malicious code in prize-market (npm)
1 compromised version
- Feb 20, 2023
Malicious code in kuna-chart-header (npm)
2 compromised versions
- Feb 20, 2023
Malicious code in flow-faucet (npm)
1 compromised version
- Feb 18, 2023
Malicious code in attribution-project (npm)
- Feb 13, 2023
Malicious code in doii.repo.tik (npm)
- Feb 13, 2023
Malicious code in doii.repo (npm)
- Feb 13, 2023
Malware in doii.repo.tik
1 compromised version
- Feb 13, 2023
Malware in doii.repo
1 compromised version
- Feb 12, 2023
Malicious code in eslint-plugin-dropbox-sign (npm)
2 compromised versions
- Feb 12, 2023
Malware in eslint-plugin-dropbox-sign
1 compromised version
- Feb 12, 2023
Malicious code in mdes_digital_enablement_api (npm)
- Feb 12, 2023
Malware in mdes_digital_enablement_api
1 compromised version
- Feb 12, 2023
Malicious code in fca-jiser-remake (npm)
- Feb 12, 2023
Malware in fca-jiser-remake
1 compromised version
- Feb 12, 2023
Malicious code in synthetic-jiser-database (npm)
- Feb 12, 2023
Malicious code in jiser-sp (npm)
- Feb 12, 2023
Malicious code in fca-jiserdz (npm)
- Feb 12, 2023
Malicious code in fca-jiser (npm)
- Feb 12, 2023
Malware in jiser-sp
1 compromised version
- Feb 12, 2023
Malware in fca-jiser
1 compromised version
- Feb 12, 2023
Malware in synthetic-jiser-database
1 compromised version
- Feb 12, 2023
Malware in fca-jiserdz
1 compromised version
- Feb 12, 2023
Malicious code in wf-extract-text-in-image2 (npm)
- Feb 12, 2023
Malicious code in micro-username (npm)
35 compromised versions
- Feb 12, 2023
Malware in wf-extract-text-in-image2
1 compromised version
- Feb 12, 2023
Malware in micro-username
1 compromised version
- Feb 11, 2023
Malicious code in tkkcalendar (PyPI)
- Feb 11, 2023
Malicious code in tkcalendra (PyPI)
- Feb 11, 2023
Malicious code in tkcalenddar (PyPI)
- Feb 11, 2023
Malicious code in tkccalendar (PyPI)
- Feb 11, 2023
Malicious code in tkcalenar (PyPI)
Page 6975 of 7,303