Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jul 25, 2022
Malicious code in wwww.etherscan.io (npm)
- Jul 25, 2022
Malicious code in www.uniswap.org (npm)
- Jul 25, 2022
Malicious code in www.etherscan.io (npm)
- Jul 25, 2022
Malicious code in www.bscscan.com (npm)
- Jul 25, 2022
Malicious code in uniswap.org (npm)
- Jul 25, 2022
Malicious code in etherscan.com (npm)
- Jul 25, 2022
Malicious code in 1inch.io (npm)
- Jul 25, 2022
Malicious code in bscscan.com (npm)
- Jul 25, 2022
Malicious code in app.uniswap.org (npm)
- Jul 25, 2022
Malicious code in app.1inch.io (npm)
- Jul 25, 2022
Malware in wwww.etherscan.io
1 compromised version
- Jul 25, 2022
Malware in 1inch.io
1 compromised version
- Jul 25, 2022
Malware in etherscan.com
1 compromised version
- Jul 25, 2022
Malware in www.etherscan.io
1 compromised version
- Jul 25, 2022
Malware in uniswap.org
1 compromised version
- Jul 25, 2022
Malware in app.1inch.io
1 compromised version
- Jul 25, 2022
Malware in app.uniswap.org
1 compromised version
- Jul 25, 2022
Malware in www.uniswap.org
1 compromised version
- Jul 25, 2022
Malware in www.bscscan.com
1 compromised version
- Jul 25, 2022
Malware in bscscan.com
1 compromised version
- Jul 25, 2022
Malicious code in liquiditypool (npm)
- Jul 25, 2022
Malicious code in etherscan.io (npm)
- Jul 25, 2022
Malware in etherscan.io
1 compromised version
- Jul 25, 2022
Malware in liquiditypool
1 compromised version
- Jul 25, 2022
Malicious code in rv-modal-store (npm)
- Jul 25, 2022
Malicious code in nishant-ok-angularjs (npm)
- Jul 25, 2022
Malicious code in fk-react-lottie-player (npm)
- Jul 25, 2022
Malicious code in epm-rdpt-angularjs (npm)
- Jul 25, 2022
Malware in fk-react-lottie-player
1 compromised version
- Jul 25, 2022
Malware in rv-modal-store
1 compromised version
- Jul 25, 2022
Malware in epm-rdpt-angularjs
1 compromised version
- Jul 25, 2022
Malware in nishant-ok-angularjs
1 compromised version
- Jul 25, 2022
Malicious code in make-discord-app (npm)
- Jul 25, 2022
Malware in make-discord-app
1 compromised version
- Jul 25, 2022
Malicious code in discord-intents-remover (npm)
- Jul 25, 2022
Malware in discord-intents-remover
1 compromised version
- Jul 25, 2022
Malicious code in proc-title (npm)
- Jul 25, 2022
Malware in proc-title
1 compromised version
- Jul 25, 2022
Malicious code in discord-antiflag (npm)
- Jul 25, 2022
Malware in discord-antiflag
1 compromised version
- Jul 25, 2022
Malicious code in notion-intl (npm)
- Jul 25, 2022
Malware in notion-intl
1 compromised version
- Jul 25, 2022
Malicious code in gather-electron-interop (npm)
- Jul 25, 2022
Malware in gather-electron-interop
1 compromised version
- Jul 25, 2022
Malicious code in nodebb-theme-opera (npm)
- Jul 25, 2022
Malware in nodebb-theme-opera
1 compromised version
- Jul 25, 2022
Malicious code in antd-form-design (npm)
- Jul 25, 2022
Malware in antd-form-design
1 compromised version
- Jul 25, 2022
Malicious code in @cobalt-team/support-email (npm)
3 compromised versions
- Jul 25, 2022
Malicious code in @cobalt-team/multi-invite (npm)
4 compromised versions
Page 7057 of 7,293