Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malware in shakti_saan_sai755
1 compromised version
- Jun 20, 2022
Malware in internal_pkg_for_755
1 compromised version
- Jun 20, 2022
Malicious code in @amp-metrics/mt-metricskit-deligates-html (npm)
- Jun 20, 2022
Malicious code in @amp-metrics/mt-metricskit (npm)
- Jun 20, 2022
Malicious code in package_test_avvo (npm)
- Jun 20, 2022
Malicious code in knsjdnksjdfn (npm)
- Jun 20, 2022
Malicious code in hakunamatata (npm)
- Jun 20, 2022
Malware in package_test_avvo
1 compromised version
- Jun 20, 2022
Malware in @amp-metrics/mt-metricskit
1 compromised version
- Jun 20, 2022
Malware in knsjdnksjdfn
1 compromised version
- Jun 20, 2022
Malware in @amp-metrics/mt-metricskit-deligates-html
1 compromised version
- Jun 20, 2022
Malware in hakunamatata
1 compromised version
- Jun 20, 2022
Malicious code in majortest (npm)
- Jun 20, 2022
Malicious code in hooolalulos (npm)
- Jun 20, 2022
Malicious code in cutoffurmind-ui-kit2 (npm)
- Jun 20, 2022
Malware in cutoffurmind-ui-kit2
1 compromised version
- Jun 20, 2022
Malware in majortest
1 compromised version
- Jun 20, 2022
Malware in hooolalulos
1 compromised version
- Jun 20, 2022
Malicious code in walmart-component-library (npm)
- Jun 20, 2022
Malicious code in telekom-index (npm)
- Jun 20, 2022
Malicious code in s-telekom (npm)
- Jun 20, 2022
Malicious code in cutoffurmind-ui-kit (npm)
- Jun 20, 2022
Malware in walmart-component-library
1 compromised version
- Jun 20, 2022
Malware in s-telekom
1 compromised version
- Jun 20, 2022
Malware in cutoffurmind-ui-kit
1 compromised version
- Jun 20, 2022
Malware in telekom-index
1 compromised version
- Jun 20, 2022
Malicious code in wmreact-spinner (npm)
- Jun 20, 2022
Malicious code in microservice-common (npm)
- Jun 20, 2022
Malicious code in iss-azure-style (npm)
- Jun 20, 2022
Malicious code in breakpoint-action (npm)
- Jun 20, 2022
Malware in wmreact-spinner
1 compromised version
- Jun 20, 2022
Malware in breakpoint-action
1 compromised version
- Jun 20, 2022
Malware in iss-azure-style
1 compromised version
- Jun 20, 2022
Malware in microservice-common
1 compromised version
- Jun 20, 2022
Malicious code in wf-kyt-starter-universal (npm)
- Jun 20, 2022
Malicious code in kyt-dev (npm)
- Jun 20, 2022
Malicious code in fantasy-react-native (npm)
- Jun 20, 2022
Malicious code in fantasy-android-react-native (npm)
- Jun 20, 2022
Malware in fantasy-react-native
1 compromised version
- Jun 20, 2022
Malware in fantasy-android-react-native
1 compromised version
- Jun 20, 2022
Malware in kyt-dev
1 compromised version
- Jun 20, 2022
Malware in wf-kyt-starter-universal
1 compromised version
- Jun 20, 2022
Malicious code in wf-kyt-starter (npm)
- Jun 20, 2022
Malicious code in mns-core-ui-dev (npm)
- Jun 20, 2022
Malicious code in mns-core-dev (npm)
- Jun 20, 2022
Malicious code in attmonetization.config (npm)
- Jun 20, 2022
Malware in mns-core-ui-dev
1 compromised version
- Jun 20, 2022
Malware in wf-kyt-starter
1 compromised version
- Jun 20, 2022
Malware in attmonetization.config
1 compromised version
- Jun 20, 2022
Malware in mns-core-dev
1 compromised version
Page 7120 of 7,293