Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jul 14, 2022
Malware in capitain-title
1 compromised version
- Jul 14, 2022
Malicious code in discord.js-selfbot-v12 (npm)
2 compromised versions
- Jul 14, 2022
Malware in discord.js-selfbot-v12
1 compromised version
- Jul 12, 2022
Malicious code in ajax-libary (npm)
1 compromised version
- Jul 12, 2022
Malicious code in libz.jquery (npm)
4 compromised versions
- Jul 12, 2022
Malicious code in atezzz (npm)
3 compromised versions
- Jul 12, 2022
Malware in ajax-libary
1 compromised version
- Jul 12, 2022
Malware in atezzz
1 compromised version
- Jul 12, 2022
Malware in libz.jquery
1 compromised version
- Jul 12, 2022
Malicious code in ajaxapis (npm)
1 compromised version
- Jul 12, 2022
Malicious code in tescodek (npm)
1 compromised version
- Jul 12, 2022
Malware in tescodek
1 compromised version
- Jul 12, 2022
Malware in ajaxapis
1 compromised version
- Jul 12, 2022
Malicious code in restli-utils (npm)
- Jul 12, 2022
Malicious code in gfg-gpe-utilities (npm)
- Jul 12, 2022
Malware in restli-utils
1 compromised version
- Jul 12, 2022
Malware in gfg-gpe-utilities
1 compromised version
- Jul 12, 2022
Malicious code in waffles-icons (npm)
- Jul 12, 2022
Malware in waffles-icons
1 compromised version
- Jul 12, 2022
Malicious code in @roborox_int/elk-logger (npm)
- Jul 12, 2022
Malware in @roborox_int/elk-logger
1 compromised version
- Jul 12, 2022
Malicious code in @vividcortex/multiplexer (npm)
- Jul 12, 2022
Malware in @vividcortex/multiplexer
1 compromised version
- Jul 12, 2022
Malicious code in amount-normalizer (npm)
- Jul 12, 2022
Malware in amount-normalizer
1 compromised version
- Jul 12, 2022
Malicious code in ugentec-framework-angular (npm)
- Jul 12, 2022
Malware in ugentec-framework-angular
1 compromised version
- Jul 12, 2022
Malicious code in xedvhtkmspgzwkfy (npm)
- Jul 12, 2022
Malware in xedvhtkmspgzwkfy
1 compromised version
- Jul 12, 2022
Malicious code in wjakcgsxftuyhbir (npm)
- Jul 12, 2022
Malware in wjakcgsxftuyhbir
1 compromised version
- Jul 12, 2022
Malicious code in ckvmqjksghytofel (npm)
- Jul 12, 2022
Malware in ckvmqjksghytofel
1 compromised version
- Jul 12, 2022
Malicious code in xlhepkvdnjmyaruo (npm)
- Jul 12, 2022
Malicious code in cywzlrmkeafidvso (npm)
- Jul 12, 2022
Malicious code in axevqmjtkunplhir (npm)
- Jul 12, 2022
Malware in axevqmjtkunplhir
1 compromised version
- Jul 12, 2022
Malware in xlhepkvdnjmyaruo
1 compromised version
- Jul 12, 2022
Malware in cywzlrmkeafidvso
1 compromised version
- Jul 12, 2022
Malicious code in xhnedzawcukgpfjv (npm)
- Jul 12, 2022
Malware in xhnedzawcukgpfjv
1 compromised version
- Jul 12, 2022
Malicious code in vkwzriqpsabdfhnc (npm)
- Jul 12, 2022
Malicious code in spkndrbxkzghiyqf (npm)
- Jul 12, 2022
Malicious code in ruzkcploymjdibah (npm)
- Jul 12, 2022
Malware in spkndrbxkzghiyqf
1 compromised version
- Jul 12, 2022
Malware in ruzkcploymjdibah
1 compromised version
- Jul 12, 2022
Malware in vkwzriqpsabdfhnc
1 compromised version
- Jul 12, 2022
Malicious code in nxvjhmdetwglsfry (npm)
- Jul 12, 2022
Malware in nxvjhmdetwglsfry
1 compromised version
- Jul 12, 2022
Malicious code in hnyzaklqkgmobdcv (npm)
Page 7066 of 7,293