Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malware in instacart-javascript
1 compromised version
- Jun 20, 2022
Malware in wickrio-proxy-bot
1 compromised version
- Jun 20, 2022
Malware in broadcast-bot-web
1 compromised version
- Jun 20, 2022
Malware in wickrcrypto
1 compromised version
- Jun 20, 2022
Malicious code in lfb-docs (npm)
- Jun 20, 2022
Malicious code in 3x3s (npm)
- Jun 20, 2022
Malicious code in base-figma-docs (npm)
- Jun 20, 2022
Malicious code in armeria-site (npm)
- Jun 20, 2022
Malware in armeria-site
1 compromised version
- Jun 20, 2022
Malware in 3x3s
1 compromised version
- Jun 20, 2022
Malware in base-figma-docs
1 compromised version
- Jun 20, 2022
Malware in lfb-docs
1 compromised version
- Jun 20, 2022
Malicious code in sqrl-website (npm)
- Jun 20, 2022
Malicious code in sqrl-monorepo (npm)
- Jun 20, 2022
Malicious code in express-4.x-passport-snapchat-example (npm)
- Jun 20, 2022
Malicious code in daglava2 (npm)
- Jun 20, 2022
Malware in sqrl-website
1 compromised version
- Jun 20, 2022
Malware in express-4.x-passport-snapchat-example
1 compromised version
- Jun 20, 2022
Malware in sqrl-monorepo
1 compromised version
- Jun 20, 2022
Malware in daglava2
1 compromised version
- Jun 20, 2022
Malicious code in web-configs (npm)
- Jun 20, 2022
Malicious code in ui-extensions (npm)
- Jun 20, 2022
Malicious code in storykit (npm)
- Jun 20, 2022
Malicious code in cmc-api-workshop (npm)
- Jun 20, 2022
Malicious code in checkout-ui-extensions-template (npm)
- Jun 20, 2022
Malware in storykit
1 compromised version
- Jun 20, 2022
Malware in web-configs
1 compromised version
- Jun 20, 2022
Malware in cmc-api-workshop
1 compromised version
- Jun 20, 2022
Malware in checkout-ui-extensions-template
1 compromised version
- Jun 20, 2022
Malware in ui-extensions
1 compromised version
- Jun 20, 2022
Malicious code in vimeo_maxmsp (npm)
- Jun 20, 2022
Malicious code in ff-webstore-e2e (npm)
- Jun 20, 2022
Malicious code in e2open-design-system (npm)
- Jun 20, 2022
Malicious code in brightspot-express (npm)
- Jun 20, 2022
Malware in vimeo_maxmsp
1 compromised version
- Jun 20, 2022
Malware in ff-webstore-e2e
1 compromised version
- Jun 20, 2022
Malware in brightspot-express
1 compromised version
- Jun 20, 2022
Malware in e2open-design-system
1 compromised version
- Jun 20, 2022
Malicious code in nuget.moq (npm)
- Jun 20, 2022
Malicious code in looker-action-hub (npm)
- Jun 20, 2022
Malicious code in everest-contracts (npm)
- Jun 20, 2022
Malicious code in calling-component-bindings (npm)
- Jun 20, 2022
Malware in looker-action-hub
1 compromised version
- Jun 20, 2022
Malware in nuget.moq
1 compromised version
- Jun 20, 2022
Malware in everest-contracts
1 compromised version
- Jun 20, 2022
Malware in calling-component-bindings
1 compromised version
- Jun 20, 2022
Malicious code in tulip-backend (npm)
- Jun 20, 2022
Malicious code in stripe-samples (npm)
- Jun 20, 2022
Malicious code in dependency-with-range (npm)
- Jun 20, 2022
Malicious code in cornershop-chat (npm)
Page 7125 of 7,293