Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malicious code in aws-centralized-logging (npm)
- Jun 20, 2022
Malware in aws-centralized-logging
1 compromised version
- Jun 20, 2022
Malware in amazon-ecr-data-replication-hub-plugin
1 compromised version
- Jun 20, 2022
Malware in aws-video-transcriber
1 compromised version
- Jun 20, 2022
Malicious code in amazon-timestream-tools (npm)
- Jun 20, 2022
Malicious code in aws-simple-cicd (npm)
- Jun 20, 2022
Malicious code in aws-perspective (npm)
- Jun 20, 2022
Malicious code in aws-instance-scheduler (npm)
- Jun 20, 2022
Malware in aws-instance-scheduler
1 compromised version
- Jun 20, 2022
Malware in amazon-timestream-tools
1 compromised version
- Jun 20, 2022
Malware in aws-perspective
1 compromised version
- Jun 20, 2022
Malware in aws-simple-cicd
1 compromised version
- Jun 20, 2022
Malicious code in simplebeerservice (npm)
- Jun 20, 2022
Malicious code in package-lock.json-dependency (npm)
- Jun 20, 2022
Malicious code in aws-ms-deploy-assistant (npm)
- Jun 20, 2022
Malicious code in aws-iot-greengrass-accelerators (npm)
- Jun 20, 2022
Malicious code in aws-greengrass-provisioner (npm)
- Jun 20, 2022
Malware in aws-iot-greengrass-accelerators
1 compromised version
- Jun 20, 2022
Malware in simplebeerservice
1 compromised version
- Jun 20, 2022
Malware in package-lock.json-dependency
1 compromised version
- Jun 20, 2022
Malware in aws-ms-deploy-assistant
1 compromised version
- Jun 20, 2022
Malware in aws-greengrass-provisioner
1 compromised version
- Jun 20, 2022
Malicious code in virtru-base64 (npm)
- Jun 20, 2022
Malicious code in eth-brownie (npm)
- Jun 20, 2022
Malicious code in cdk-fargate-fastautlscaler (npm)
- Jun 20, 2022
Malware in cdk-fargate-fastautlscaler
1 compromised version
- Jun 20, 2022
Malware in eth-brownie
1 compromised version
- Jun 20, 2022
Malware in virtru-base64
1 compromised version
- Jun 20, 2022
Malicious code in amplify-graphiql-explorer (npm)
- Jun 20, 2022
Malicious code in amplify-e2e-core (npm)
- Jun 20, 2022
Malicious code in test-rule-package (npm)
- Jun 20, 2022
Malicious code in my-amplify-plugin (npm)
- Jun 20, 2022
Malicious code in es-sink (npm)
- Jun 20, 2022
Malicious code in architect-http-static (npm)
- Jun 20, 2022
Malware in architect-http-static
1 compromised version
- Jun 20, 2022
Malware in my-amplify-plugin
1 compromised version
- Jun 20, 2022
Malware in test-rule-package
1 compromised version
- Jun 20, 2022
Malware in es-sink
1 compromised version
- Jun 20, 2022
Malware in amplify-e2e-core
1 compromised version
- Jun 20, 2022
Malware in amplify-graphiql-explorer
1 compromised version
- Jun 20, 2022
Malicious code in all-of-them (npm)
- Jun 20, 2022
Malicious code in nestjs-ldap-auth (npm)
- Jun 20, 2022
Malware in nestjs-ldap-auth
1 compromised version
- Jun 20, 2022
Malware in all-of-them
1 compromised version
- Jun 20, 2022
Malicious code in singhaditi12 (npm)
- Jun 20, 2022
Malicious code in nt-shared (npm)
- Jun 20, 2022
Malicious code in grunt-bowerspawn (npm)
- Jun 20, 2022
Malicious code in ember-tracked-local-storag (npm)
- Jun 20, 2022
Malicious code in discord.js-selfbot-updated (npm)
- Jun 20, 2022
Malware in grunt-bowerspawn
1 compromised version
Page 7107 of 7,293