Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malicious code in babelplugindynamiciomportnode (npm)
- Aug 19, 2022
Malicious code in babelplugin7transformobjectrestspreaf (npm)
- Aug 19, 2022
Malicious code in babelpl0uginteansformasynctogenerator (npm)
- Aug 19, 2022
Malicious code in babelllugintransformes2015modulescommonjs (npm)
- Aug 19, 2022
Malicious code in babelhelspevvuejsxmergeprops (npm)
- Aug 19, 2022
Malicious code in babelgeoeator (npm)
- Aug 19, 2022
Malicious code in babeleslynt (npm)
- Aug 19, 2022
Malicious code in babeeopresetstage0 (npm)
- Aug 19, 2022
Malicious code in awesomeypescriptxoader (npm)
- Aug 19, 2022
Malicious code in autoprefirx (npm)
- Aug 19, 2022
Malicious code in asyncvalidvator (npm)
- Aug 19, 2022
Malicious code in assretplus (npm)
- Aug 19, 2022
Malicious code in apollolinhttp (npm)
- Aug 19, 2022
Malicious code in apollocli8ent (npm)
- Aug 19, 2022
Malicious code in ansiescapeks (npm)
- Aug 19, 2022
Malicious code in annoisd (npm)
- Aug 19, 2022
Malicious code in angularanijmate (npm)
- Aug 19, 2022
Malware in awesomeypescriptxoader
1 compromised version
- Aug 19, 2022
Malware in angularanijmate
1 compromised version
- Aug 19, 2022
Malware in 5rn
1 compromised version
- Aug 19, 2022
Malware in babelplugin7transformobjectrestspreaf
1 compromised version
- Aug 19, 2022
Malware in babelplugintansofrmdecoratorlegacy
1 compromised version
- Aug 19, 2022
Malware in autoprefirx
1 compromised version
- Aug 19, 2022
Malware in ahtts
1 compromised version
- Aug 19, 2022
Malware in abbelregiswter
1 compromised version
- Aug 19, 2022
Malware in 9args
1 compromised version
- Aug 19, 2022
Malware in amelcsxe
1 compromised version
- Aug 19, 2022
Malware in babeleslynt
1 compromised version
- Aug 19, 2022
Malware in babelpl0uginteansformasynctogenerator
1 compromised version
- Aug 19, 2022
Malware in asyncvalidvator
1 compromised version
- Aug 19, 2022
Malware in ansiescapeks
1 compromised version
- Aug 19, 2022
Malware in 9mz
1 compromised version
- Aug 19, 2022
Malware in agdlebasr
1 compromised version
- Aug 19, 2022
Malware in 7unzp
1 compromised version
- Aug 19, 2022
Malware in untlidify
1 compromised version
- Aug 19, 2022
Malware in babelhelspevvuejsxmergeprops
1 compromised version
- Aug 19, 2022
Malware in assretplus
1 compromised version
- Aug 19, 2022
Malware in 5blong
1 compromised version
- Aug 19, 2022
Malware in apollocli8ent
1 compromised version
- Aug 19, 2022
Malware in alidurl
1 compromised version
- Aug 19, 2022
Malware in amll
1 compromised version
- Aug 19, 2022
Malware in 6jestlr
1 compromised version
- Aug 19, 2022
Malware in 7lu
1 compromised version
- Aug 19, 2022
Malware in babelllugintransformes2015modulescommonjs
1 compromised version
- Aug 19, 2022
Malware in babelplugindynamiciomportnode
1 compromised version
- Aug 19, 2022
Malware in annoisd
1 compromised version
- Aug 19, 2022
Malware in babelpluginmodulexresjzlver
1 compromised version
- Aug 19, 2022
Malware in babelgeoeator
1 compromised version
- Aug 19, 2022
Malware in babeeopresetstage0
1 compromised version
- Aug 19, 2022
Malware in apollolinhttp
1 compromised version
Page 7049 of 7,293