Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Sep 14, 2022
Malicious code in module-config-inc (npm)
- Sep 14, 2022
Malicious code in legacy-client-ebay (npm)
- Sep 14, 2022
Malicious code in gatekeeper-ebay (npm)
- Sep 14, 2022
Malicious code in fire-marshal-ebay (npm)
- Sep 14, 2022
Malicious code in environment-ebay (npm)
- Sep 14, 2022
Malicious code in cookies-ebay (npm)
- Sep 14, 2022
Malicious code in commons-inc (npm)
- Sep 14, 2022
Malicious code in brogan-ebay (npm)
- Sep 14, 2022
Malicious code in auth-ebay (npm)
- Sep 14, 2022
Malware in auth-ebay
1 compromised version
- Sep 14, 2022
Malware in gatekeeper-ebay
1 compromised version
- Sep 14, 2022
Malware in module-config-inc
1 compromised version
- Sep 14, 2022
Malware in legacy-client-ebay
1 compromised version
- Sep 14, 2022
Malware in optimizer-plugin-inc
1 compromised version
- Sep 14, 2022
Malware in fire-marshal-ebay
1 compromised version
- Sep 14, 2022
Malware in brogan-ebay
1 compromised version
- Sep 14, 2022
Malware in navigator-fingerprint-front
1 compromised version
- Sep 14, 2022
Malware in environment-ebay
1 compromised version
- Sep 14, 2022
Malware in cookies-ebay
1 compromised version
- Sep 14, 2022
Malware in commons-inc
1 compromised version
- Sep 14, 2022
Malicious code in hackmebankdkorrrevshell24hagain (npm)
- Sep 14, 2022
Malicious code in hackmebankdkorrrevshell24h (npm)
- Sep 14, 2022
Malware in hackmebankdkorrrevshell24h
1 compromised version
- Sep 14, 2022
Malware in hackmebankdkorrrevshell24hagain
1 compromised version
- Sep 14, 2022
Malicious code in core-better (npm)
- Sep 14, 2022
Malware in core-better
1 compromised version
- Sep 13, 2022
Malicious code in internallib_v944 (npm)
- Sep 13, 2022
Malicious code in internallib_v900 (npm)
- Sep 13, 2022
Malicious code in internallib_v877 (npm)
- Sep 13, 2022
Malicious code in internallib_v820 (npm)
- Sep 13, 2022
Malicious code in internallib_v706 (npm)
- Sep 13, 2022
Malicious code in internallib_v567 (npm)
- Sep 13, 2022
Malicious code in internallib_v387 (npm)
- Sep 13, 2022
Malicious code in internallib_v243 (npm)
- Sep 13, 2022
Malicious code in internallib_v20 (npm)
- Sep 13, 2022
Malicious code in internallib_v199 (npm)
- Sep 13, 2022
Malicious code in internallib_v180 (npm)
- Sep 13, 2022
Malicious code in internallib_v158 (npm)
- Sep 13, 2022
Malicious code in internallib_v114 (npm)
- Sep 13, 2022
Malware in internallib_v944
1 compromised version
- Sep 13, 2022
Malware in internallib_v199
1 compromised version
- Sep 13, 2022
Malware in internallib_v820
1 compromised version
- Sep 13, 2022
Malware in internallib_v387
1 compromised version
- Sep 13, 2022
Malware in internallib_v706
1 compromised version
- Sep 13, 2022
Malware in internallib_v567
1 compromised version
- Sep 13, 2022
Malware in internallib_v20
1 compromised version
- Sep 13, 2022
Malware in internallib_v243
1 compromised version
- Sep 13, 2022
Malware in internallib_v114
1 compromised version
- Sep 13, 2022
Malware in internallib_v158
1 compromised version
- Sep 13, 2022
Malware in internallib_v180
1 compromised version
Page 7007 of 7,293