Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 29, 2022
Malicious code in @personio-internal/split-sdk-provider (npm)
- Aug 29, 2022
Malware in @personio-internal/split-sdk-provider
1 compromised version
- Aug 26, 2022
Malicious code in adj-ordinaryjs (npm)
- Aug 26, 2022
Malware in adj-ordinaryjs
1 compromised version
- Aug 26, 2022
Malicious code in google-iot-core (npm)
- Aug 26, 2022
Malicious code in en-task-duedate-utils (npm)
- Aug 26, 2022
Malicious code in en-pagedjs (npm)
- Aug 26, 2022
Malware in google-iot-core
1 compromised version
- Aug 26, 2022
Malware in en-task-duedate-utils
1 compromised version
- Aug 26, 2022
Malware in en-pagedjs
1 compromised version
- Aug 25, 2022
Malicious code in react-solid (npm)
- Aug 25, 2022
Malware in react-solid
1 compromised version
- Aug 25, 2022
Malicious code in uniswapmempool (npm)
- Aug 25, 2022
Malware in uniswapmempool
1 compromised version
- Aug 25, 2022
Malicious code in test-npm-mal-kfir (npm)
- Aug 25, 2022
Malware in test-npm-mal-kfir
1 compromised version
- Aug 24, 2022
Malicious code in wozhendeshitule (npm)
- Aug 24, 2022
Malicious code in suqin-node-stack (npm)
- Aug 24, 2022
Malicious code in nibushidao-dsda-sa (npm)
- Aug 24, 2022
Malicious code in ceshia-node-stack (npm)
- Aug 24, 2022
Malware in suqin-node-stack
1 compromised version
- Aug 24, 2022
Malware in nibushidao-dsda-sa
1 compromised version
- Aug 24, 2022
Malware in ceshia-node-stack
1 compromised version
- Aug 24, 2022
Malware in wozhendeshitule
1 compromised version
- Aug 24, 2022
Malicious code in antcloud1111-node-stack (npm)
- Aug 24, 2022
Malicious code in antcloud111-node-stack (npm)
- Aug 24, 2022
Malware in antcloud111-node-stack
1 compromised version
- Aug 24, 2022
Malware in antcloud1111-node-stack
1 compromised version
- Aug 24, 2022
Malicious code in www.coingecko.com (npm)
- Aug 24, 2022
Malware in www.coingecko.com
1 compromised version
- Aug 23, 2022
Malicious code in www.etherscan.com (npm)
- Aug 23, 2022
Malware in www.etherscan.com
1 compromised version
- Aug 23, 2022
Malicious code in social-media-icons-react (npm)
- Aug 23, 2022
Malware in social-media-icons-react
1 compromised version
- Aug 22, 2022
Malicious code in goede.cl (npm)
- Aug 22, 2022
Malware in goede.cl
1 compromised version
- Aug 22, 2022
Malicious code in ing-lib-ow (npm)
- Aug 22, 2022
Malicious code in getmeurl (npm)
- Aug 22, 2022
Malware in ing-lib-ow
1 compromised version
- Aug 22, 2022
Malware in getmeurl
1 compromised version
- Aug 22, 2022
Malicious code in sa-kws-demo-web (npm)
- Aug 22, 2022
Malicious code in sa-dashboard (npm)
- Aug 22, 2022
Malicious code in freekws-devportal-api-client-nestjs (npm)
- Aug 22, 2022
Malicious code in freekws-devportal-api-client-angular (npm)
- Aug 22, 2022
Malware in sa-dashboard
1 compromised version
- Aug 22, 2022
Malware in freekws-devportal-api-client-angular
1 compromised version
- Aug 22, 2022
Malware in freekws-devportal-api-client-nestjs
1 compromised version
- Aug 22, 2022
Malware in sa-kws-demo-web
1 compromised version
- Aug 22, 2022
Malicious code in alexhostx (npm)
- Aug 22, 2022
Malicious code in simontok (npm)
Page 7012 of 7,293