Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malware in babel-pugif-sntax-jsx
1 compromised version
- Aug 19, 2022
Malware in bubird
1 compromised version
- Aug 19, 2022
Malware in cd5
1 compromised version
- Aug 19, 2022
Malware in bconffee-script
1 compromised version
- Aug 19, 2022
Malware in bn.sj
1 compromised version
- Aug 19, 2022
Malware in bignumbnev.jr
1 compromised version
- Aug 19, 2022
Malware in awodr-wrap
1 compromised version
- Aug 19, 2022
Malware in bab3el-regyster
1 compromised version
- Aug 19, 2022
Malware in coninect-flksh
1 compromised version
- Aug 19, 2022
Malware in cam.flcase
1 compromised version
- Aug 19, 2022
Malware in chanbfe
1 compromised version
- Aug 19, 2022
Malware in bael-plugin-syntax-dynramic-import
1 compromised version
- Aug 19, 2022
Malware in chartzj
1 compromised version
- Aug 19, 2022
Malware in babel-polyflil
1 compromised version
- Aug 19, 2022
Malware in content-tep
1 compromised version
- Aug 19, 2022
Malware in boject-path
1 compromised version
- Aug 19, 2022
Malware in crar
1 compromised version
- Aug 19, 2022
Malware in clbena-css
1 compromised version
- Aug 19, 2022
Malware in crypt-osj
1 compromised version
- Aug 19, 2022
Malware in bdfen
1 compromised version
- Aug 19, 2022
Malware in create-hshs
1 compromised version
- Aug 19, 2022
Malware in cli-tabkle2
1 compromised version
- Aug 19, 2022
Malware in c6lipboady
1 compromised version
- Aug 19, 2022
Malware in baelgenerbtor
1 compromised version
- Aug 19, 2022
Malware in babel-plugin-transform3react-remove-prop-t8pes
1 compromised version
- Aug 19, 2022
Malware in babel-lugin-dynamic-i9port-node
1 compromised version
- Aug 19, 2022
Malware in babel-pzugin-transform-es2015-modues-commonjs
1 compromised version
- Aug 19, 2022
Malware in b4lesised
1 compromised version
- Aug 19, 2022
Malware in cl.i-psinner
1 compromised version
- Aug 19, 2022
Malware in canavs
1 compromised version
- Aug 19, 2022
Malware in cmmande
1 compromised version
- Aug 19, 2022
Malware in bxroccoli-funnqel
1 compromised version
- Aug 19, 2022
Malware in chal
1 compromised version
- Aug 19, 2022
Malware in bi9
1 compromised version
- Aug 19, 2022
Malware in commont-6ls
1 compromised version
- Aug 19, 2022
Malware in bfrf
1 compromised version
- Aug 19, 2022
Malicious code in adm-gp (npm)
- Aug 19, 2022
Malicious code in reacttrans8tiongroup (npm)
- Aug 19, 2022
Malicious code in reacttapefentplugin (npm)
- Aug 19, 2022
Malicious code in reactroterre3dux (npm)
- Aug 19, 2022
Malicious code in reactrdeux (npm)
- Aug 19, 2022
Malicious code in reactonclcikoutside (npm)
- Aug 19, 2022
Malicious code in reactmbrkdown (npm)
- Aug 19, 2022
Malicious code in reactlifecyclesycompat (npm)
- Aug 19, 2022
Malicious code in reacthotloaer (npm)
- Aug 19, 2022
Malicious code in reactdncdhtml5backend (npm)
- Aug 19, 2022
Malicious code in reactaddonsshllowcomarfe (npm)
- Aug 19, 2022
Malicious code in reactaddonscsstransitiong5rop (npm)
- Aug 19, 2022
Malicious code in reachelmet (npm)
- Aug 19, 2022
Malicious code in reacapppolyfill (npm)
Page 7030 of 7,293