Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malware in docs.hackerone.com
1 compromised version
- Jun 20, 2022
Malware in newrelic-caf
1 compromised version
- Jun 20, 2022
Malware in line-liff-v2-starter
1 compromised version
- Jun 20, 2022
Malware in com.outsystems.plugins.fileviewer
1 compromised version
- Jun 20, 2022
Malicious code in github-owners-bot (npm)
- Jun 20, 2022
Malicious code in facebook-instant-articles-builder (npm)
- Jun 20, 2022
Malicious code in curve-api (npm)
- Jun 20, 2022
Malicious code in cro-staking (npm)
- Jun 20, 2022
Malware in curve-api
1 compromised version
- Jun 20, 2022
Malware in facebook-instant-articles-builder
1 compromised version
- Jun 20, 2022
Malware in github-owners-bot
1 compromised version
- Jun 20, 2022
Malware in cro-staking
1 compromised version
- Jun 20, 2022
Malicious code in playwright.dev (npm)
- Jun 20, 2022
Malicious code in libfuzzer-sys (npm)
- Jun 20, 2022
Malicious code in internal_package_goludev (npm)
- Jun 20, 2022
Malicious code in hero-admin (npm)
- Jun 20, 2022
Malware in hero-admin
1 compromised version
- Jun 20, 2022
Malware in internal_package_goludev
1 compromised version
- Jun 20, 2022
Malware in libfuzzer-sys
1 compromised version
- Jun 20, 2022
Malware in playwright.dev
1 compromised version
- Jun 20, 2022
Malicious code in tempdownloadtempfile (npm)
1 compromised version
- Jun 20, 2022
Malicious code in splitsoftware (npm)
- Jun 20, 2022
Malicious code in splitio-redux (npm)
- Jun 20, 2022
Malicious code in nodejs_net_server (npm)
12 compromised versions
- Jun 20, 2022
Malware in splitio-redux
1 compromised version
- Jun 20, 2022
Malware in tempdownloadtempfile
1 compromised version
- Jun 20, 2022
Malware in nodejs_net_server
1 compromised version
- Jun 20, 2022
Malware in splitsoftware
1 compromised version
- Jun 20, 2022
Malicious code in wafer-core (npm)
- Jun 20, 2022
Malicious code in virtuoso.dev (npm)
- Jun 20, 2022
Malicious code in ungap (npm)
- Jun 20, 2022
Malicious code in moneytree (npm)
- Jun 20, 2022
Malicious code in arkane-connect (npm)
- Jun 20, 2022
Malware in moneytree
1 compromised version
- Jun 20, 2022
Malware in wafer-core
1 compromised version
- Jun 20, 2022
Malware in virtuoso.dev
1 compromised version
- Jun 20, 2022
Malware in ungap
1 compromised version
- Jun 20, 2022
Malware in arkane-connect
1 compromised version
- Jun 20, 2022
Malicious code in zendeskgarden (npm)
- Jun 20, 2022
Malicious code in mt-web-icons (npm)
- Jun 20, 2022
Malicious code in grnhse (npm)
- Jun 20, 2022
Malicious code in blockchain-com (npm)
- Jun 20, 2022
Malware in mt-web-icons
1 compromised version
- Jun 20, 2022
Malware in blockchain-com
1 compromised version
- Jun 20, 2022
Malware in zendeskgarden
1 compromised version
- Jun 20, 2022
Malware in grnhse
1 compromised version
- Jun 20, 2022
Malicious code in twilio-paste (npm)
- Jun 20, 2022
Malicious code in researchgate (npm)
- Jun 20, 2022
Malicious code in ledgerhq (npm)
- Jun 20, 2022
Malware in twilio-paste
1 compromised version
Page 7117 of 7,293