Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jul 21, 2022
Malicious code in irisk (npm)
- Jul 21, 2022
Malicious code in identity-sam-landing (npm)
- Jul 21, 2022
Malicious code in hyatt-mumbai (npm)
- Jul 21, 2022
Malicious code in hemlibrademo1 (npm)
- Jul 21, 2022
Malicious code in fullcontact-wpengine (npm)
- Jul 21, 2022
Malicious code in forge-app-bones (npm)
- Jul 21, 2022
Malicious code in fitbit-connect (npm)
- Jul 21, 2022
Malicious code in ethics (npm)
- Jul 21, 2022
Malicious code in emarketing (npm)
- Jul 21, 2022
Malicious code in dpp_cms (npm)
- Jul 21, 2022
Malicious code in brandsites (npm)
- Jul 21, 2022
Malicious code in autotrain (npm)
- Jul 21, 2022
Malware in sales-demo
1 compromised version
- Jul 21, 2022
Malware in serverless-push-hasura
1 compromised version
- Jul 21, 2022
Malware in dpp_cms
1 compromised version
- Jul 21, 2022
Malware in rsk-devportal
1 compromised version
- Jul 21, 2022
Malware in ledger-live-assets
1 compromised version
- Jul 21, 2022
Malware in fullcontact-wpengine
1 compromised version
- Jul 21, 2022
Malware in accent.jobs
1 compromised version
- Jul 21, 2022
Malware in fitbit-connect
1 compromised version
- Jul 21, 2022
Malware in unibet_package
1 compromised version
- Jul 21, 2022
Malware in kenticodevelopmentconfiguration
1 compromised version
- Jul 21, 2022
Malware in forge-app-bones
1 compromised version
- Jul 21, 2022
Malware in nozbedesktop
1 compromised version
- Jul 21, 2022
Malware in emarketing
1 compromised version
- Jul 21, 2022
Malware in hemlibrademo1
1 compromised version
- Jul 21, 2022
Malware in starbuckssystem.website
1 compromised version
- Jul 21, 2022
Malware in promohline
1 compromised version
- Jul 21, 2022
Malware in style-guide-microsite
1 compromised version
- Jul 21, 2022
Malware in ethics
1 compromised version
- Jul 21, 2022
Malware in brandsites
1 compromised version
- Jul 21, 2022
Malware in rg-engineering
1 compromised version
- Jul 21, 2022
Malware in irisk
1 compromised version
- Jul 21, 2022
Malware in ua-publication-manager
1 compromised version
- Jul 21, 2022
Malware in hyatt-mumbai
1 compromised version
- Jul 21, 2022
Malware in autotrain
1 compromised version
- Jul 21, 2022
Malware in web-kore-sdk
1 compromised version
- Jul 21, 2022
Malware in kinesis-app-panel
1 compromised version
- Jul 21, 2022
Malware in identity-sam-landing
1 compromised version
- Jul 21, 2022
Malware in portail-web
1 compromised version
- Jul 21, 2022
Malware in mofronts
1 compromised version
- Jul 21, 2022
Malicious code in absorblms (npm)
- Jul 21, 2022
Malicious code in whatsapp-landing-page (npm)
- Jul 21, 2022
Malicious code in walmart-express (npm)
- Jul 21, 2022
Malicious code in vyopta-analytics (npm)
- Jul 21, 2022
Malicious code in ui-shop (npm)
- Jul 21, 2022
Malicious code in training-client (npm)
- Jul 21, 2022
Malicious code in sdelements (npm)
- Jul 21, 2022
Malicious code in require-jq (npm)
- Jul 21, 2022
Malicious code in quick-app-guide (npm)
Page 7062 of 7,293