Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malicious code in rnpm-plugin-test (npm)
- Jun 20, 2022
Malicious code in base-app-unauth (npm)
- Jun 20, 2022
Malicious code in api-unauthed (npm)
- Jun 20, 2022
Malware in wdcustom-breakpoint
1 compromised version
- Jun 20, 2022
Malware in webext-experiment-utils
1 compromised version
- Jun 20, 2022
Malware in base-app-unauth
1 compromised version
- Jun 20, 2022
Malware in rnpm-plugin-test
1 compromised version
- Jun 20, 2022
Malware in api-unauthed
1 compromised version
- Jun 20, 2022
Malicious code in wf-translate-text (npm)
- Jun 20, 2022
Malicious code in smithy-typescript (npm)
- Jun 20, 2022
Malicious code in gs-ux-uitoolkit (npm)
- Jun 20, 2022
Malware in gs-ux-uitoolkit
1 compromised version
- Jun 20, 2022
Malware in smithy-typescript
1 compromised version
- Jun 20, 2022
Malware in wf-translate-text
1 compromised version
- Jun 20, 2022
Malicious code in amazon-s3-find-and-forget (npm)
- Jun 20, 2022
Malicious code in amazon-kinesis-video-streams-webrtc-sdk-js (npm)
- Jun 20, 2022
Malicious code in service-workbench-on-aws (npm)
- Jun 20, 2022
Malicious code in aws-solutions-constructs (npm)
- Jun 20, 2022
Malicious code in aws-data-api-ux (npm)
- Jun 20, 2022
Malware in aws-solutions-constructs
1 compromised version
- Jun 20, 2022
Malware in amazon-s3-find-and-forget
1 compromised version
- Jun 20, 2022
Malware in amazon-kinesis-video-streams-webrtc-sdk-js
1 compromised version
- Jun 20, 2022
Malware in service-workbench-on-aws
1 compromised version
- Jun 20, 2022
Malware in aws-data-api-ux
1 compromised version
- Jun 20, 2022
Malicious code in unicornflix (npm)
- Jun 20, 2022
Malicious code in aws-delivlib-sample (npm)
- Jun 20, 2022
Malicious code in aws-amplify-unicorntrivia-workshop (npm)
- Jun 20, 2022
Malware in aws-delivlib-sample
1 compromised version
- Jun 20, 2022
Malware in unicornflix
1 compromised version
- Jun 20, 2022
Malware in aws-amplify-unicorntrivia-workshop
1 compromised version
- Jun 20, 2022
Malicious code in amazon-s3-data-replication-hub-plugin (npm)
- Jun 20, 2022
Malicious code in output-scrubber-nodejs (npm)
- Jun 20, 2022
Malicious code in aws-track-and-trace (npm)
- Jun 20, 2022
Malicious code in anti-hotlinking (npm)
- Jun 20, 2022
Malware in output-scrubber-nodejs
1 compromised version
- Jun 20, 2022
Malware in aws-track-and-trace
1 compromised version
- Jun 20, 2022
Malware in amazon-s3-data-replication-hub-plugin
1 compromised version
- Jun 20, 2022
Malware in anti-hotlinking
1 compromised version
- Jun 20, 2022
Malicious code in amplify-video (npm)
- Jun 20, 2022
Malicious code in open-data-registry-browser (npm)
- Jun 20, 2022
Malicious code in mplify-video (npm)
- Jun 20, 2022
Malicious code in aws-data-replication-hub (npm)
- Jun 20, 2022
Malicious code in aws-centralized-waf-and-vpc-security-group-management (npm)
- Jun 20, 2022
Malware in aws-centralized-waf-and-vpc-security-group-management
1 compromised version
- Jun 20, 2022
Malware in open-data-registry-browser
1 compromised version
- Jun 20, 2022
Malware in mplify-video
1 compromised version
- Jun 20, 2022
Malware in aws-data-replication-hub
1 compromised version
- Jun 20, 2022
Malware in amplify-video
1 compromised version
- Jun 20, 2022
Malicious code in amazon-ecr-data-replication-hub-plugin (npm)
- Jun 20, 2022
Malicious code in aws-video-transcriber (npm)
Page 7106 of 7,293