Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jul 21, 2022
Malware in csp-login-app
1 compromised version
- Jul 21, 2022
Malicious code in isq-web (npm)
- Jul 21, 2022
Malicious code in dpd-returns-portal (npm)
- Jul 21, 2022
Malicious code in arketype (npm)
- Jul 21, 2022
Malware in arketype
1 compromised version
- Jul 21, 2022
Malware in isq-web
1 compromised version
- Jul 21, 2022
Malware in dpd-returns-portal
1 compromised version
- Jul 21, 2022
Malicious code in @platform-apps/ui-logger (npm)
- Jul 21, 2022
Malicious code in @platform-apps/portal-ui (npm)
- Jul 21, 2022
Malicious code in @platform-apps/platform-ui-app (npm)
- Jul 21, 2022
Malware in @platform-apps/ui-logger
1 compromised version
- Jul 21, 2022
Malware in @platform-apps/platform-ui-app
1 compromised version
- Jul 21, 2022
Malware in @platform-apps/portal-ui
1 compromised version
- Jul 20, 2022
Malicious code in redox-phone-support (npm)
- Jul 20, 2022
Malicious code in careem-captain-earning-experience (npm)
- Jul 20, 2022
Malware in careem-captain-earning-experience
1 compromised version
- Jul 20, 2022
Malware in redox-phone-support
1 compromised version
- Jul 20, 2022
Malicious code in amplify-category-api-e2e-core (npm)
- Jul 20, 2022
Malicious code in amplify-category-api-dynamodb-simulator (npm)
- Jul 20, 2022
Malicious code in percy-web (npm)
- Jul 20, 2022
Malicious code in deere-i18n (npm)
- Jul 20, 2022
Malware in deere-i18n
1 compromised version
- Jul 20, 2022
Malware in percy-web
1 compromised version
- Jul 20, 2022
Malware in amplify-category-api-e2e-core
1 compromised version
- Jul 20, 2022
Malware in amplify-category-api-dynamodb-simulator
1 compromised version
- Jul 20, 2022
Malicious code in wm-publish-statuses (npm)
- Jul 20, 2022
Malicious code in wm-cookies-api (npm)
- Jul 20, 2022
Malware in wm-publish-statuses
1 compromised version
- Jul 20, 2022
Malware in wm-cookies-api
1 compromised version
- Jul 20, 2022
Malicious code in html-live-player (npm)
- Jul 20, 2022
Malware in html-live-player
1 compromised version
- Jul 20, 2022
Malicious code in indy-vdr-shared (npm)
- Jul 20, 2022
Malware in indy-vdr-shared
1 compromised version
- Jul 20, 2022
Malicious code in com.alice.adonis (npm)
- Jul 20, 2022
Malware in com.alice.adonis
1 compromised version
- Jul 20, 2022
Malicious code in @alice-bob/com.alice.adonis (npm)
- Jul 20, 2022
Malware in @alice-bob/com.alice.adonis
1 compromised version
- Jul 20, 2022
Malicious code in ppreact-lib (npm)
- Jul 20, 2022
Malicious code in mediasoup-sdp-bridge (npm)
- Jul 20, 2022
Malicious code in header-footer-paypal (npm)
- Jul 20, 2022
Malicious code in dw-header-footer-paypal (npm)
- Jul 20, 2022
Malware in dw-header-footer-paypal
1 compromised version
- Jul 20, 2022
Malware in header-footer-paypal
1 compromised version
- Jul 20, 2022
Malware in ppreact-lib
1 compromised version
- Jul 20, 2022
Malware in mediasoup-sdp-bridge
1 compromised version
- Jul 20, 2022
Malicious code in remotepshell (npm)
- Jul 20, 2022
Malicious code in hwzpgf (npm)
- Jul 20, 2022
Malware in remotepshell
1 compromised version
- Jul 20, 2022
Malware in hwzpgf
1 compromised version
- Jul 20, 2022
Malicious code in discord.js-auth2 (npm)
Page 7064 of 7,293