Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jan 10, 2023
Malware in pancakeswap.com
1 compromised version
- Jan 10, 2023
Malware in ftx.com
1 compromised version
- Jan 10, 2023
Malware in stake.fish
1 compromised version
- Jan 10, 2023
Malware in everstake.one
1 compromised version
- Jan 10, 2023
Malicious code in frappe-framework (npm)
- Jan 10, 2023
Malware in frappe-framework
1 compromised version
- Jan 10, 2023
Malicious code in dependancy_confusion_test_tal3 (npm)
- Jan 10, 2023
Malicious code in dependancy_confusion_test_tal2 (npm)
- Jan 10, 2023
Malicious code in dependancy_confusion_test_tal (npm)
- Jan 10, 2023
Malicious code in dependancy_confusion_test2 (npm)
- Jan 10, 2023
Malicious code in dep_pre_install_v3 (npm)
- Jan 10, 2023
Malicious code in dep_pre_install_v2 (npm)
- Jan 10, 2023
Malicious code in dep_conf_tal2 (npm)
- Jan 10, 2023
Malicious code in dep-conf-test-tal2 (npm)
- Jan 10, 2023
Malicious code in dep-conf-test-tal (npm)
- Jan 10, 2023
Malware in dependancy_confusion_test2
1 compromised version
- Jan 10, 2023
Malware in dep_pre_install_v2
1 compromised version
- Jan 10, 2023
Malware in dependancy_confusion_test_tal3
1 compromised version
- Jan 10, 2023
Malware in dependancy_confusion_test_tal2
1 compromised version
- Jan 10, 2023
Malware in dep-conf-test-tal
1 compromised version
- Jan 10, 2023
Malware in dep-conf-test-tal2
1 compromised version
- Jan 10, 2023
Malware in dep_pre_install_v3
1 compromised version
- Jan 10, 2023
Malware in dep_conf_tal2
1 compromised version
- Jan 10, 2023
Malware in dependancy_confusion_test_tal
1 compromised version
- Jan 10, 2023
Malicious code in dep_confusion_test123 (npm)
- Jan 10, 2023
Malicious code in dep_conf_tal (npm)
- Jan 10, 2023
Malware in dep_confusion_test123
1 compromised version
- Jan 10, 2023
Malware in dep_conf_tal
1 compromised version
- Jan 10, 2023
Malicious code in data-privatelink (npm)
- Jan 10, 2023
Malware in data-privatelink
1 compromised version
- Jan 10, 2023
Malicious code in rdi-ui (npm)
- Jan 10, 2023
Malicious code in evolve-runtime (npm)
- Jan 10, 2023
Malicious code in cu-dashboard-components (npm)
- Jan 10, 2023
Malware in cu-dashboard-components
1 compromised version
- Jan 10, 2023
Malware in evolve-runtime
1 compromised version
- Jan 10, 2023
Malware in rdi-ui
1 compromised version
- Jan 10, 2023
Malicious code in si-mfes-library (npm)
- Jan 10, 2023
Malicious code in shared-gatsby-components (npm)
- Jan 10, 2023
Malicious code in portal-numbers (npm)
- Jan 10, 2023
Malicious code in maw-fetch (npm)
- Jan 10, 2023
Malicious code in latitude-analytics (npm)
- Jan 10, 2023
Malicious code in hsbc-pb-sdk (npm)
- Jan 10, 2023
Malicious code in generic-ui-components (npm)
- Jan 10, 2023
Malicious code in fi-connect (npm)
- Jan 10, 2023
Malicious code in chrome-extension-message-relay (npm)
- Jan 10, 2023
Malicious code in canopy-common-fo (npm)
- Jan 10, 2023
Malicious code in bsd-ui-utils (npm)
- Jan 10, 2023
Malware in si-mfes-library
1 compromised version
- Jan 10, 2023
Malware in shared-gatsby-components
1 compromised version
- Jan 10, 2023
Malware in latitude-analytics
1 compromised version
Page 6994 of 7,293