Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malicious code in zd-svg-icons (npm)
- Jun 20, 2022
Malicious code in wp-calypso (npm)
- Jun 20, 2022
Malicious code in ng-json-explorer (npm)
- Jun 20, 2022
Malicious code in jetpack-eslint (npm)
- Jun 20, 2022
Malicious code in isolated-block-editor (npm)
- Jun 20, 2022
Malware in wp-calypso
1 compromised version
- Jun 20, 2022
Malware in zd-svg-icons
1 compromised version
- Jun 20, 2022
Malware in isolated-block-editor
1 compromised version
- Jun 20, 2022
Malware in ng-json-explorer
1 compromised version
- Jun 20, 2022
Malware in jetpack-eslint
1 compromised version
- Jun 20, 2022
Malicious code in adaptivecards-extras-designer (npm)
- Jun 20, 2022
Malicious code in chat-component-bindings (npm)
- Jun 20, 2022
Malicious code in calling-stateful-client (npm)
- Jun 20, 2022
Malware in calling-stateful-client
1 compromised version
- Jun 20, 2022
Malware in chat-component-bindings
1 compromised version
- Jun 20, 2022
Malware in adaptivecards-extras-designer
1 compromised version
- Jun 20, 2022
Malicious code in acs-ui-common (npm)
- Jun 20, 2022
Malicious code in @highspot/closure-loader (npm)
- Jun 20, 2022
Malicious code in com.unity.scriptablebuildpipeline (npm)
- Jun 20, 2022
Malicious code in angular-codemirror (npm)
- Jun 20, 2022
Malware in angular-codemirror
1 compromised version
- Jun 20, 2022
Malware in acs-ui-common
1 compromised version
- Jun 20, 2022
Malware in @highspot/closure-loader
1 compromised version
- Jun 20, 2022
Malware in com.unity.scriptablebuildpipeline
1 compromised version
- Jun 20, 2022
Malicious code in amplify_default (npm)
- Jun 20, 2022
Malicious code in @ws-amplify/core (npm)
- Jun 20, 2022
Malicious code in xrprovider (npm)
- Jun 20, 2022
Malicious code in preinstallv5 (npm)
- Jun 20, 2022
Malicious code in brandtheme (npm)
- Jun 20, 2022
Malware in xrprovider
1 compromised version
- Jun 20, 2022
Malware in amplify_default
1 compromised version
- Jun 20, 2022
Malware in brandtheme
1 compromised version
- Jun 20, 2022
Malware in @ws-amplify/core
1 compromised version
- Jun 20, 2022
Malware in preinstallv5
1 compromised version
- Jun 20, 2022
Malicious code in urlopener (npm)
- Jun 20, 2022
Malicious code in oauthstorage (npm)
- Jun 20, 2022
Malicious code in mqttoverwsprovider (npm)
- Jun 20, 2022
Malicious code in lexruntime (npm)
- Jun 20, 2022
Malware in lexruntime
1 compromised version
- Jun 20, 2022
Malware in urlopener
1 compromised version
- Jun 20, 2022
Malware in mqttoverwsprovider
1 compromised version
- Jun 20, 2022
Malware in oauthstorage
1 compromised version
- Jun 20, 2022
Malicious code in amplify-codegen-e2e-core (npm)
- Jun 20, 2022
Malicious code in uv-dlopen (npm)
- Jun 20, 2022
Malicious code in storagefileshare (npm)
- Jun 20, 2022
Malicious code in p4clients (npm)
- Jun 20, 2022
Malicious code in keyvault-resource-manager (npm)
- Jun 20, 2022
Malware in keyvault-resource-manager
1 compromised version
- Jun 20, 2022
Malware in storagefileshare
1 compromised version
- Jun 20, 2022
Malware in amplify-codegen-e2e-core
1 compromised version
Page 7111 of 7,293