Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malware in fucking-n-pack
1 compromised version
- Jun 20, 2022
Malware in klokl-nirob
1 compromised version
- Jun 20, 2022
Malware in js-wixcode-sdk
1 compromised version
- Jun 20, 2022
Malware in wix-users
1 compromised version
- Jun 20, 2022
Malicious code in noblox.js-promise (npm)
- Jun 20, 2022
Malicious code in kbn-ui-shared-deps (npm)
- Jun 20, 2022
Malicious code in kbn-analytics (npm)
- Jun 20, 2022
Malicious code in intena_pkg_for_hs (npm)
- Jun 20, 2022
Malware in noblox.js-promise
1 compromised version
- Jun 20, 2022
Malware in kbn-analytics
1 compromised version
- Jun 20, 2022
Malware in intena_pkg_for_hs
1 compromised version
- Jun 20, 2022
Malware in kbn-ui-shared-deps
1 compromised version
- Jun 20, 2022
Malicious code in oppo_web_app (npm)
- Jun 20, 2022
Malicious code in kbn-i18n (npm)
- Jun 20, 2022
Malicious code in gd-sentry (npm)
- Jun 20, 2022
Malicious code in axis-components (npm)
- Jun 20, 2022
Malware in oppo_web_app
1 compromised version
- Jun 20, 2022
Malware in kbn-i18n
1 compromised version
- Jun 20, 2022
Malware in gd-sentry
1 compromised version
- Jun 20, 2022
Malware in axis-components
1 compromised version
- Jun 20, 2022
Malicious code in xfi-client-core (npm)
- Jun 20, 2022
Malicious code in safari-prevent-zoom (npm)
- Jun 20, 2022
Malicious code in react-table-next (npm)
- Jun 20, 2022
Malicious code in react-table-7 (npm)
- Jun 20, 2022
Malware in react-table-7
1 compromised version
- Jun 20, 2022
Malware in xfi-client-core
1 compromised version
- Jun 20, 2022
Malware in react-table-next
1 compromised version
- Jun 20, 2022
Malware in safari-prevent-zoom
1 compromised version
- Jun 20, 2022
Malicious code in vscode-npm-script (npm)
- Jun 20, 2022
Malicious code in typescript-dom-lib-generator (npm)
- Jun 20, 2022
Malicious code in firebase-extensions (npm)
- Jun 20, 2022
Malicious code in datanode-explorer (npm)
- Jun 20, 2022
Malicious code in dailymotion-sdk-js (npm)
- Jun 20, 2022
Malware in datanode-explorer
1 compromised version
- Jun 20, 2022
Malware in dailymotion-sdk-js
1 compromised version
- Jun 20, 2022
Malware in typescript-dom-lib-generator
1 compromised version
- Jun 20, 2022
Malware in vscode-npm-script
1 compromised version
- Jun 20, 2022
Malware in firebase-extensions
1 compromised version
- Jun 20, 2022
Malicious code in octoprint-slackbot (npm)
- Jun 20, 2022
Malicious code in id-docs.telenordigital.com (npm)
- Jun 20, 2022
Malicious code in code-oss-dev (npm)
- Jun 20, 2022
Malware in code-oss-dev
1 compromised version
- Jun 20, 2022
Malware in id-docs.telenordigital.com
1 compromised version
- Jun 20, 2022
Malware in octoprint-slackbot
1 compromised version
- Jun 20, 2022
Malicious code in testing_confusion_pkg (npm)
- Jun 20, 2022
Malicious code in slack-reacjilator (npm)
- Jun 20, 2022
Malicious code in oauth_tutorial (npm)
- Jun 20, 2022
Malicious code in internal_crypto_express_package (npm)
- Jun 20, 2022
Malicious code in eslint-config-hwit (npm)
- Jun 20, 2022
Malware in slack-reacjilator
1 compromised version
Page 7127 of 7,293