Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jul 27, 2022
Malicious code in ishakti (npm)
- Jul 27, 2022
Malware in ishakti
1 compromised version
- Jul 27, 2022
Malicious code in epic-ue-loading (npm)
21 compromised versions
- Jul 27, 2022
Malware in epic-ue-loading
1 compromised version
- Jul 27, 2022
Malicious code in small-sm (npm)
- Jul 27, 2022
Malware in small-sm
1 compromised version
- Jul 27, 2022
Malicious code in dolphin-dbase (npm)
- Jul 27, 2022
Malicious code in db-dolphin (npm)
- Jul 27, 2022
Malicious code in database-dolphin (npm)
- Jul 27, 2022
Malware in database-dolphin
1 compromised version
- Jul 27, 2022
Malware in dolphin-dbase
1 compromised version
- Jul 27, 2022
Malware in db-dolphin
1 compromised version
- Jul 26, 2022
Malicious code in crashtravel-utilities (npm)
- Jul 26, 2022
Malware in crashtravel-utilities
1 compromised version
- Jul 26, 2022
Malicious code in lib-g (npm)
- Jul 26, 2022
Malware in lib-g
1 compromised version
- Jul 26, 2022
Malicious code in testdorime (npm)
- Jul 26, 2022
Malicious code in myfirstdependencywithserver (npm)
- Jul 26, 2022
Malicious code in floureeb (npm)
- Jul 26, 2022
Malicious code in dorimedepen (npm)
- Jul 26, 2022
Malware in testdorime
1 compromised version
- Jul 26, 2022
Malware in dorimedepen
1 compromised version
- Jul 26, 2022
Malware in myfirstdependencywithserver
1 compromised version
- Jul 26, 2022
Malware in floureeb
1 compromised version
- Jul 26, 2022
Malicious code in totaralms (npm)
- Jul 26, 2022
Malware in totaralms
1 compromised version
- Jul 26, 2022
Malicious code in melar-dev-site (npm)
- Jul 26, 2022
Malicious code in design-insights (npm)
- Jul 26, 2022
Malware in design-insights
1 compromised version
- Jul 26, 2022
Malware in melar-dev-site
1 compromised version
- Jul 26, 2022
Malicious code in uber-images (npm)
- Jul 26, 2022
Malware in uber-images
1 compromised version
- Jul 26, 2022
Malicious code in uber-unify (npm)
- Jul 26, 2022
Malware in uber-unify
1 compromised version
- Jul 26, 2022
Malicious code in razer-xdk (npm)
- Jul 26, 2022
Malicious code in hyperwallet-xdk (npm)
- Jul 26, 2022
Malicious code in hyperwallet-sdk-paypal (npm)
- Jul 26, 2022
Malware in hyperwallet-sdk-paypal
1 compromised version
- Jul 26, 2022
Malware in razer-xdk
1 compromised version
- Jul 26, 2022
Malware in hyperwallet-xdk
1 compromised version
- Jul 26, 2022
Malicious code in bipiy74902-wx1 (npm)
- Jul 26, 2022
Malware in bipiy74902-wx1
1 compromised version
- Jul 26, 2022
Malicious code in ot-performance (npm)
- Jul 26, 2022
Malicious code in ot-pausedetector (npm)
- Jul 26, 2022
Malicious code in ot-menu-test (npm)
- Jul 26, 2022
Malicious code in ot-logger (npm)
- Jul 26, 2022
Malicious code in ot-daily-algorithm (npm)
- Jul 26, 2022
Malicious code in create-ot-express-app (npm)
- Jul 26, 2022
Malware in create-ot-express-app
1 compromised version
- Jul 26, 2022
Malware in ot-logger
1 compromised version
Page 7055 of 7,293