Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malware in pwn_module
1 compromised version
- Jun 20, 2022
Malware in @is24at/react-tracking
1 compromised version
- Jun 20, 2022
Malware in login.mail.ru
1 compromised version
- Jun 20, 2022
Malware in lenta_pulse_mail_ru
1 compromised version
- Jun 20, 2022
Malicious code in topmailru (npm)
- Jun 20, 2022
Malicious code in pulse-lenta (npm)
- Jun 20, 2022
Malicious code in fbjs-build (npm)
- Jun 20, 2022
Malware in pulse-lenta
1 compromised version
- Jun 20, 2022
Malware in topmailru
1 compromised version
- Jun 20, 2022
Malware in fbjs-build
1 compromised version
- Jun 20, 2022
Malicious code in admanhtml (npm)
- Jun 20, 2022
Malicious code in wpt-retriever (npm)
- Jun 20, 2022
Malicious code in virtual-authenticators-tab (npm)
- Jun 20, 2022
Malicious code in rbadman-html5 (npm)
- Jun 20, 2022
Malicious code in mailrupush (npm)
- Jun 20, 2022
Malware in rbadman-html5
1 compromised version
- Jun 20, 2022
Malware in wpt-retriever
1 compromised version
- Jun 20, 2022
Malware in mailrupush
1 compromised version
- Jun 20, 2022
Malware in admanhtml
1 compromised version
- Jun 20, 2022
Malware in virtual-authenticators-tab
1 compromised version
- Jun 20, 2022
Malicious code in test-audit (npm)
- Jun 20, 2022
Malicious code in ms.jsll (npm)
- Jun 20, 2022
Malicious code in jsll (npm)
- Jun 20, 2022
Malicious code in fraud-filter (npm)
- Jun 20, 2022
Malware in test-audit
1 compromised version
- Jun 20, 2022
Malware in fraud-filter
1 compromised version
- Jun 20, 2022
Malware in jsll
1 compromised version
- Jun 20, 2022
Malware in ms.jsll
1 compromised version
- Jun 20, 2022
Malicious code in frn-api-client (npm)
- Jun 20, 2022
Malicious code in cms-component-nyse-login (npm)
- Jun 20, 2022
Malicious code in cms-component-layout-nyse-footer (npm)
- Jun 20, 2022
Malicious code in audi-feature-services (npm)
- Jun 20, 2022
Malware in cms-component-nyse-login
1 compromised version
- Jun 20, 2022
Malware in cms-component-layout-nyse-footer
1 compromised version
- Jun 20, 2022
Malware in frn-api-client
1 compromised version
- Jun 20, 2022
Malware in audi-feature-services
1 compromised version
- Jun 20, 2022
Malicious code in vidyard-player-sdk (npm)
- Jun 20, 2022
Malicious code in paycom-cross-platform (npm)
- Jun 20, 2022
Malicious code in dpz.seo (npm)
- Jun 20, 2022
Malicious code in core-guest-spa (npm)
- Jun 20, 2022
Malware in core-guest-spa
1 compromised version
- Jun 20, 2022
Malware in paycom-cross-platform
1 compromised version
- Jun 20, 2022
Malware in dpz.seo
1 compromised version
- Jun 20, 2022
Malware in vidyard-player-sdk
1 compromised version
- Jun 20, 2022
Malicious code in airtable-client (npm)
- Jun 20, 2022
Malicious code in yamm (npm)
- Jun 20, 2022
Malicious code in base-css-styles (npm)
- Jun 20, 2022
Malicious code in apex-web-tools (npm)
- Jun 20, 2022
Malware in airtable-client
1 compromised version
- Jun 20, 2022
Malware in yamm
1 compromised version
Page 7101 of 7,293