Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malicious code in deppppp (npm)
- Jun 20, 2022
Malware in segmentrequestmanager
1 compromised version
- Jun 20, 2022
Malware in networkstatusdetector
1 compromised version
- Jun 20, 2022
Malware in deppppp
1 compromised version
- Jun 20, 2022
Malicious code in relayfbnetworkloggercontroller (npm)
- Jun 20, 2022
Malicious code in multiplesegmentsprovider (npm)
- Jun 20, 2022
Malicious code in mosutils (npm)
- Jun 20, 2022
Malicious code in mergeseekrangegaps (npm)
- Jun 20, 2022
Malware in mosutils
1 compromised version
- Jun 20, 2022
Malware in relayfbnetworkloggercontroller
1 compromised version
- Jun 20, 2022
Malware in multiplesegmentsprovider
1 compromised version
- Jun 20, 2022
Malware in mergeseekrangegaps
1 compromised version
- Jun 20, 2022
Malicious code in maybeconverthiveerrortoshakaneterror (npm)
- Jun 20, 2022
Malicious code in loglongakamairequest (npm)
- Jun 20, 2022
Malicious code in localbitratehelper (npm)
- Jun 20, 2022
Malicious code in getseekrangegapsfromshakareferences (npm)
- Jun 20, 2022
Malware in maybeconverthiveerrortoshakaneterror
1 compromised version
- Jun 20, 2022
Malware in loglongakamairequest
1 compromised version
- Jun 20, 2022
Malware in getseekrangegapsfromshakareferences
1 compromised version
- Jun 20, 2022
Malware in localbitratehelper
1 compromised version
- Jun 20, 2022
Malicious code in firstloadedvideopriorityadjuster (npm)
- Jun 20, 2022
Malicious code in extractcea608 (npm)
- Jun 20, 2022
Malicious code in concatarraybuffer (npm)
- Jun 20, 2022
Malicious code in cleartimeout (npm)
- Jun 20, 2022
Malware in firstloadedvideopriorityadjuster
1 compromised version
- Jun 20, 2022
Malware in extractcea608
1 compromised version
- Jun 20, 2022
Malware in cleartimeout
1 compromised version
- Jun 20, 2022
Malware in concatarraybuffer
1 compromised version
- Jun 20, 2022
Malicious code in clearinterval (npm)
- Jun 20, 2022
Malicious code in clearimmediate (npm)
- Jun 20, 2022
Malicious code in canusefetchstream (npm)
- Jun 20, 2022
Malicious code in buffervelocity (npm)
- Jun 20, 2022
Malicious code in bufferreplacementhelper (npm)
- Jun 20, 2022
Malware in bufferreplacementhelper
1 compromised version
- Jun 20, 2022
Malware in canusefetchstream
1 compromised version
- Jun 20, 2022
Malware in clearinterval
1 compromised version
- Jun 20, 2022
Malware in buffervelocity
1 compromised version
- Jun 20, 2022
Malware in clearimmediate
1 compromised version
- Jun 20, 2022
Malicious code in vertx (npm)
- Jun 20, 2022
Malicious code in snapchat-api (npm)
- Jun 20, 2022
Malicious code in com.google.external-dependency-manager (npm)
- Jun 20, 2022
Malicious code in blockfi (npm)
- Jun 20, 2022
Malware in vertx
1 compromised version
- Jun 20, 2022
Malware in snapchat-api
1 compromised version
- Jun 20, 2022
Malware in com.google.external-dependency-manager
1 compromised version
- Jun 20, 2022
Malware in blockfi
1 compromised version
- Jun 20, 2022
Malicious code in newrelic-caf (npm)
- Jun 20, 2022
Malicious code in line-liff-v2-starter (npm)
- Jun 20, 2022
Malicious code in docs.hackerone.com (npm)
- Jun 20, 2022
Malicious code in com.outsystems.plugins.fileviewer (npm)
Page 7116 of 7,293