Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Aug 19, 2022
Malware in codashop
1 compromised version
- Aug 19, 2022
Malware in freefire
1 compromised version
- Aug 19, 2022
Malicious code in rochman (npm)
2 compromised versions
- Aug 19, 2022
Malicious code in footericons (npm)
2 compromised versions
- Aug 19, 2022
Malicious code in footericonfootericon (npm)
1 compromised version
- Aug 19, 2022
Malware in footericons
1 compromised version
- Aug 19, 2022
Malware in rochman
1 compromised version
- Aug 19, 2022
Malware in footericonfootericon
1 compromised version
- Aug 18, 2022
Malicious code in disney.js (npm)
- Aug 18, 2022
Malware in disney.js
1 compromised version
- Aug 18, 2022
Malicious code in @wheatup/pivotjs (npm)
- Aug 18, 2022
Malicious code in whi18n (npm)
- Aug 18, 2022
Malicious code in whevent (npm)
- Aug 18, 2022
Malicious code in wherehouse (npm)
- Aug 18, 2022
Malicious code in wheen (npm)
- Aug 18, 2022
Malicious code in website-snapper (npm)
- Aug 18, 2022
Malicious code in lodash-utils (npm)
- Aug 18, 2022
Malicious code in hexie-encode (npm)
- Aug 18, 2022
Malicious code in doper (npm)
- Aug 18, 2022
Malware in doper
1 compromised version
- Aug 18, 2022
Malware in whi18n
1 compromised version
- Aug 18, 2022
Malware in lodash-utils
1 compromised version
- Aug 18, 2022
Malware in @wheatup/pivotjs
1 compromised version
- Aug 18, 2022
Malware in wheen
1 compromised version
- Aug 18, 2022
Malware in hexie-encode
1 compromised version
- Aug 18, 2022
Malware in whevent
1 compromised version
- Aug 18, 2022
Malware in website-snapper
1 compromised version
- Aug 18, 2022
Malware in wherehouse
1 compromised version
- Aug 18, 2022
Malicious code in runkit-ui (npm)
- Aug 18, 2022
Malicious code in runkit-engines (npm)
- Aug 18, 2022
Malicious code in mxuaubyyc (npm)
- Aug 18, 2022
Malware in mxuaubyyc
1 compromised version
- Aug 18, 2022
Malware in runkit-engines
1 compromised version
- Aug 18, 2022
Malware in runkit-ui
1 compromised version
- Aug 18, 2022
Malicious code in @squareup/data-api.js-core (npm)
- Aug 18, 2022
Malware in @squareup/data-api.js-core
1 compromised version
- Aug 18, 2022
Malicious code in colors-1.0.0 (npm)
- Aug 18, 2022
Malware in colors-1.0.0
1 compromised version
- Aug 18, 2022
Malicious code in @employee-experience/common (npm)
- Aug 18, 2022
Malware in @employee-experience/common
1 compromised version
- Aug 18, 2022
Malicious code in @7tv/playback-signature (npm)
- Aug 18, 2022
Malware in @7tv/playback-signature
1 compromised version
- Aug 17, 2022
Malicious code in @scoober/foodtracker (npm)
- Aug 17, 2022
Malware in @scoober/foodtracker
1 compromised version
- Aug 17, 2022
Malicious code in weather69420 (npm)
- Aug 17, 2022
Malicious code in rickyjs (npm)
- Aug 17, 2022
Malicious code in formrocket.js (npm)
- Aug 17, 2022
Malicious code in breezeweather (npm)
- Aug 17, 2022
Malware in formrocket.js
1 compromised version
- Aug 17, 2022
Malware in breezeweather
1 compromised version
Page 7051 of 7,293