Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Sep 8, 2022
Malware in obfuscation-detector2
1 compromised version
- Sep 8, 2022
Malware in useevil
1 compromised version
- Sep 8, 2022
Malicious code in www-server (npm)
- Sep 8, 2022
Malicious code in www-search (npm)
- Sep 8, 2022
Malicious code in www-error (npm)
- Sep 8, 2022
Malicious code in wvvbch (npm)
- Sep 8, 2022
Malware in www-search
1 compromised version
- Sep 8, 2022
Malware in www-error
1 compromised version
- Sep 8, 2022
Malware in wvvbch
1 compromised version
- Sep 8, 2022
Malware in www-server
1 compromised version
- Sep 7, 2022
Malicious code in workbox-plugin (npm)
- Sep 7, 2022
Malicious code in osm-compare (npm)
- Sep 7, 2022
Malicious code in netlify-gocommerce-widget (npm)
- Sep 7, 2022
Malware in workbox-plugin
1 compromised version
- Sep 7, 2022
Malware in netlify-gocommerce-widget
1 compromised version
- Sep 7, 2022
Malware in osm-compare
1 compromised version
- Sep 7, 2022
Malicious code in package-watcher (npm)
- Sep 7, 2022
Malicious code in opsgenie-connectwise-integration (npm)
- Sep 7, 2022
Malicious code in --no-audit (npm)
- Sep 7, 2022
Malicious code in google-auth-library-nodejs (npm)
- Sep 7, 2022
Malicious code in --legacy-peer-deps (npm)
- Sep 7, 2022
Malicious code in docusaurus-plugin-name (npm)
- Sep 7, 2022
Malware in --legacy-peer-deps
1 compromised version
- Sep 7, 2022
Malware in docusaurus-plugin-name
1 compromised version
- Sep 7, 2022
Malware in google-auth-library-nodejs
1 compromised version
- Sep 7, 2022
Malware in opsgenie-connectwise-integration
1 compromised version
- Sep 7, 2022
Malware in package-watcher
1 compromised version
- Sep 7, 2022
Malware in --no-audit
1 compromised version
- Sep 7, 2022
Malicious code in vscode-clangd (npm)
- Sep 7, 2022
Malicious code in sample-travis-ci (npm)
- Sep 7, 2022
Malicious code in lldb-vscode (npm)
- Sep 7, 2022
Malicious code in chrome-ssh-agent (npm)
- Sep 7, 2022
Malware in vscode-clangd
1 compromised version
- Sep 7, 2022
Malware in chrome-ssh-agent
1 compromised version
- Sep 7, 2022
Malware in sample-travis-ci
1 compromised version
- Sep 7, 2022
Malware in lldb-vscode
1 compromised version
- Sep 7, 2022
Malicious code in fleetrouting-app-backend (npm)
- Sep 7, 2022
Malicious code in fleetrouting-app (npm)
- Sep 7, 2022
Malware in fleetrouting-app-backend
1 compromised version
- Sep 7, 2022
Malware in fleetrouting-app
1 compromised version
- Sep 7, 2022
Malicious code in h3-jsv3 (npm)
- Sep 7, 2022
Malicious code in com.assistant.sdk.core (npm)
- Sep 7, 2022
Malware in h3-jsv3
1 compromised version
- Sep 7, 2022
Malware in com.assistant.sdk.core
1 compromised version
- Sep 6, 2022
Malicious code in brbsainath (npm)
- Sep 6, 2022
Malware in brbsainath
1 compromised version
- Sep 6, 2022
Malicious code in internallib_v100 (npm)
- Sep 6, 2022
Malware in internallib_v100
1 compromised version
- Sep 5, 2022
Malicious code in react-server-dom-vite (npm)
- Sep 5, 2022
Malware in react-server-dom-vite
1 compromised version
Page 7010 of 7,293