Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malicious code in mynewpkgtest4 (npm)
- Jun 20, 2022
Malicious code in mynewpkgtest3 (npm)
- Jun 20, 2022
Malicious code in mynewpkgtest2 (npm)
- Jun 20, 2022
Malware in mynewpkgtest4
1 compromised version
- Jun 20, 2022
Malware in mynewpkgtest2
1 compromised version
- Jun 20, 2022
Malware in mynewpkgtest3
1 compromised version
- Jun 20, 2022
Malicious code in mynewpkgtest6 (npm)
- Jun 20, 2022
Malicious code in mynewpkgtest5 (npm)
- Jun 20, 2022
Malicious code in hope-center (npm)
- Jun 20, 2022
Malicious code in hope-base (npm)
- Jun 20, 2022
Malicious code in eslint-plugin-jsdom-internal (npm)
- Jun 20, 2022
Malware in hope-base
1 compromised version
- Jun 20, 2022
Malware in mynewpkgtest5
1 compromised version
- Jun 20, 2022
Malware in hope-center
1 compromised version
- Jun 20, 2022
Malware in eslint-plugin-jsdom-internal
1 compromised version
- Jun 20, 2022
Malware in mynewpkgtest6
1 compromised version
- Jun 20, 2022
Malicious code in hope-hub (npm)
- Jun 20, 2022
Malicious code in hope-http-broker (npm)
- Jun 20, 2022
Malicious code in hope-entity-store (npm)
- Jun 20, 2022
Malicious code in hope-entity (npm)
- Jun 20, 2022
Malware in hope-hub
1 compromised version
- Jun 20, 2022
Malware in hope-entity-store
1 compromised version
- Jun 20, 2022
Malware in hope-http-broker
1 compromised version
- Jun 20, 2022
Malware in hope-entity
1 compromised version
- Jun 20, 2022
Malicious code in hope-workflow (npm)
- Jun 20, 2022
Malicious code in hope-store (npm)
- Jun 20, 2022
Malicious code in hope-session-manager (npm)
- Jun 20, 2022
Malicious code in hope-message (npm)
- Jun 20, 2022
Malicious code in hope-hub-center-shared (npm)
- Jun 20, 2022
Malware in hope-session-manager
1 compromised version
- Jun 20, 2022
Malware in hope-store
1 compromised version
- Jun 20, 2022
Malware in hope-message
1 compromised version
- Jun 20, 2022
Malware in hope-hub-center-shared
1 compromised version
- Jun 20, 2022
Malware in hope-workflow
1 compromised version
- Jun 20, 2022
Malicious code in wtfpkgtst (npm)
- Jun 20, 2022
Malicious code in nowaypkg (npm)
- Jun 20, 2022
Malicious code in 01template1 (npm)
- Jun 20, 2022
Malware in 01template1
1 compromised version
- Jun 20, 2022
Malware in nowaypkg
1 compromised version
- Jun 20, 2022
Malware in wtfpkgtst
1 compromised version
- Jun 20, 2022
Malicious code in jose-cookbook (npm)
- Jun 20, 2022
Malicious code in hubs-configtool (npm)
- Jun 20, 2022
Malicious code in fxa-dev-launcher (npm)
- Jun 20, 2022
Malicious code in devtools-wasm-dwarf (npm)
- Jun 20, 2022
Malware in devtools-wasm-dwarf
1 compromised version
- Jun 20, 2022
Malware in fxa-dev-launcher
1 compromised version
- Jun 20, 2022
Malware in hubs-configtool
1 compromised version
- Jun 20, 2022
Malware in jose-cookbook
1 compromised version
- Jun 20, 2022
Malicious code in webext-experiment-utils (npm)
- Jun 20, 2022
Malicious code in wdcustom-breakpoint (npm)
Page 7105 of 7,293