Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jul 21, 2022
Malware in deere-ui-multiselect
1 compromised version
- Jul 21, 2022
Malware in deere-ui-loader
1 compromised version
- Jul 21, 2022
Malware in deere-ui-branding-ag
1 compromised version
- Jul 21, 2022
Malware in shaikh-test
1 compromised version
- Jul 21, 2022
Malicious code in equipment-color (npm)
- Jul 21, 2022
Malicious code in deere-ui-icons (npm)
- Jul 21, 2022
Malicious code in deere-ui-domain-framework-mixins (npm)
- Jul 21, 2022
Malicious code in deere-ui-domain-framework (npm)
- Jul 21, 2022
Malicious code in deere-ui-asset-events (npm)
- Jul 21, 2022
Malicious code in deere-map-features (npm)
- Jul 21, 2022
Malware in deere-map-features
1 compromised version
- Jul 21, 2022
Malware in deere-ui-asset-events
1 compromised version
- Jul 21, 2022
Malware in deere-ui-domain-framework
1 compromised version
- Jul 21, 2022
Malware in equipment-color
1 compromised version
- Jul 21, 2022
Malware in deere-ui-icons
1 compromised version
- Jul 21, 2022
Malware in deere-ui-domain-framework-mixins
1 compromised version
- Jul 21, 2022
Malicious code in revshell (npm)
- Jul 21, 2022
Malware in revshell
1 compromised version
- Jul 21, 2022
Malicious code in totally-legit-package (npm)
- Jul 21, 2022
Malicious code in suspicious-react-scripts (npm)
- Jul 21, 2022
Malware in suspicious-react-scripts
1 compromised version
- Jul 21, 2022
Malware in totally-legit-package
1 compromised version
- Jul 21, 2022
Malicious code in strangegyokuro (npm)
- Jul 21, 2022
Malware in strangegyokuro
1 compromised version
- Jul 21, 2022
Malicious code in tradeview (npm)
- Jul 21, 2022
Malware in tradeview
1 compromised version
- Jul 21, 2022
Malicious code in virtru-typography (npm)
- Jul 21, 2022
Malware in virtru-typography
1 compromised version
- Jul 21, 2022
Malicious code in test-dep-conf-my (npm)
- Jul 21, 2022
Malware in test-dep-conf-my
1 compromised version
- Jul 21, 2022
Malicious code in activity-iframe-sdk (npm)
- Jul 21, 2022
Malware in activity-iframe-sdk
1 compromised version
- Jul 21, 2022
Malicious code in insomnia-plugin-simple-hmac-auth (npm)
- Jul 21, 2022
Malware in insomnia-plugin-simple-hmac-auth
1 compromised version
- Jul 21, 2022
Malicious code in node-hawk-search (npm)
- Jul 21, 2022
Malware in node-hawk-search
1 compromised version
- Jul 21, 2022
Malicious code in api-routes-rest (npm)
- Jul 21, 2022
Malware in api-routes-rest
1 compromised version
- Jul 21, 2022
Malicious code in paper-toolbar (npm)
- Jul 21, 2022
Malicious code in iron-collapse (npm)
- Jul 21, 2022
Malware in paper-toolbar
1 compromised version
- Jul 21, 2022
Malware in iron-collapse
1 compromised version
- Jul 21, 2022
Malicious code in postinstall-dummy (npm)
- Jul 21, 2022
Malware in postinstall-dummy
1 compromised version
- Jul 21, 2022
Malicious code in @proto-services/integration (npm)
- Jul 21, 2022
Malicious code in @proto-services/banking (npm)
- Jul 21, 2022
Malware in @proto-services/integration
1 compromised version
- Jul 21, 2022
Malware in @proto-services/banking
1 compromised version
- Jul 21, 2022
Malicious code in target-campaign-library (npm)
- Jul 21, 2022
Malware in target-campaign-library
1 compromised version
Page 7060 of 7,293