Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malware in sb-helpers
1 compromised version
- Jun 20, 2022
Malware in sb-resp-ui
1 compromised version
- Jun 20, 2022
Malicious code in vstui (npm)
- Jun 20, 2022
Malicious code in tsmodulechecker (npm)
- Jun 20, 2022
Malicious code in syndication-templates (npm)
- Jun 20, 2022
Malicious code in sb-resp-utils (npm)
- Jun 20, 2022
Malware in sb-resp-utils
1 compromised version
- Jun 20, 2022
Malware in vstui
1 compromised version
- Jun 20, 2022
Malware in syndication-templates
1 compromised version
- Jun 20, 2022
Malware in tsmodulechecker
1 compromised version
- Jun 20, 2022
Malicious code in window-channel (npm)
- Jun 20, 2022
Malicious code in prism-reactjs (npm)
- Jun 20, 2022
Malicious code in inter-frontend-lib-header (npm)
- Jun 20, 2022
Malicious code in editor-kit (npm)
- Jun 20, 2022
Malware in inter-frontend-lib-header
1 compromised version
- Jun 20, 2022
Malware in window-channel
1 compromised version
- Jun 20, 2022
Malware in editor-kit
1 compromised version
- Jun 20, 2022
Malware in prism-reactjs
1 compromised version
- Jun 20, 2022
Malicious code in vue2-jest (npm)
- Jun 20, 2022
Malicious code in polaris-rails (npm)
- Jun 20, 2022
Malicious code in occl_core (npm)
- Jun 20, 2022
Malicious code in dexy (npm)
- Jun 20, 2022
Malware in polaris-rails
1 compromised version
- Jun 20, 2022
Malware in occl_core
1 compromised version
- Jun 20, 2022
Malware in vue2-jest
1 compromised version
- Jun 20, 2022
Malware in dexy
1 compromised version
- Jun 20, 2022
Malicious code in vue-loader-v15 (npm)
- Jun 20, 2022
Malicious code in textlint-checker-for-vuejs-jp-docs (npm)
- Jun 20, 2022
Malicious code in service-module-utils (npm)
- Jun 20, 2022
Malicious code in service-module-api (npm)
- Jun 20, 2022
Malware in textlint-checker-for-vuejs-jp-docs
1 compromised version
- Jun 20, 2022
Malware in service-module-api
1 compromised version
- Jun 20, 2022
Malware in vue-loader-v15
1 compromised version
- Jun 20, 2022
Malware in service-module-utils
1 compromised version
- Jun 20, 2022
Malicious code in @snapp/ui-kit (npm)
- Jun 20, 2022
Malicious code in @snapp/framework (npm)
- Jun 20, 2022
Malicious code in @nothingfu/test (npm)
- Jun 20, 2022
Malicious code in johncenatesting (npm)
- Jun 20, 2022
Malware in @snapp/ui-kit
1 compromised version
- Jun 20, 2022
Malware in johncenatesting
1 compromised version
- Jun 20, 2022
Malware in @nothingfu/test
1 compromised version
- Jun 20, 2022
Malware in @snapp/framework
1 compromised version
- Jun 20, 2022
Malicious code in jensectesting (npm)
- Jun 20, 2022
Malicious code in fk-ua-parser (npm)
- Jun 20, 2022
Malicious code in evil-package-sample (npm)
- Jun 20, 2022
Malicious code in asana-actions (npm)
- Jun 20, 2022
Malware in asana-actions
1 compromised version
- Jun 20, 2022
Malware in evil-package-sample
1 compromised version
- Jun 20, 2022
Malware in jensectesting
1 compromised version
- Jun 20, 2022
Malware in fk-ua-parser
1 compromised version
Page 7110 of 7,293