Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malware in internal_crypto_express_package
1 compromised version
- Jun 20, 2022
Malware in oauth_tutorial
1 compromised version
- Jun 20, 2022
Malware in eslint-config-hwit
1 compromised version
- Jun 20, 2022
Malware in testing_confusion_pkg
1 compromised version
- Jun 20, 2022
Malicious code in wegmae_act (npm)
- Jun 20, 2022
Malicious code in supcom-web (npm)
- Jun 20, 2022
Malicious code in collab-ui-angular (npm)
- Jun 20, 2022
Malicious code in collab-ui (npm)
- Jun 20, 2022
Malware in wegmae_act
1 compromised version
- Jun 20, 2022
Malware in collab-ui-angular
1 compromised version
- Jun 20, 2022
Malware in supcom-web
1 compromised version
- Jun 20, 2022
Malware in collab-ui
1 compromised version
- Jun 20, 2022
Malicious code in stanford-arcade (npm)
- Jun 20, 2022
Malicious code in private-eye (npm)
- Jun 20, 2022
Malicious code in osefo.ux (npm)
- Jun 20, 2022
Malicious code in lnbapi (npm)
- Jun 20, 2022
Malware in lnbapi
1 compromised version
- Jun 20, 2022
Malware in private-eye
1 compromised version
- Jun 20, 2022
Malware in osefo.ux
1 compromised version
- Jun 20, 2022
Malware in stanford-arcade
1 compromised version
- Jun 20, 2022
Malicious code in liveshare (npm)
- Jun 20, 2022
Malicious code in life.qq.com (npm)
- Jun 20, 2022
Malicious code in job_ee_ce (npm)
- Jun 20, 2022
Malicious code in itsn (npm)
- Jun 20, 2022
Malware in life.qq.com
1 compromised version
- Jun 20, 2022
Malware in job_ee_ce
1 compromised version
- Jun 20, 2022
Malware in itsn
1 compromised version
- Jun 20, 2022
Malware in liveshare
1 compromised version
- Jun 20, 2022
Malicious code in itop (npm)
- Jun 20, 2022
Malicious code in infrastructure_skypefeedback_tools (npm)
- Jun 20, 2022
Malicious code in gwac (npm)
- Jun 20, 2022
Malicious code in flocktory (npm)
- Jun 20, 2022
Malicious code in digitalexam (npm)
- Jun 20, 2022
Malware in infrastructure_skypefeedback_tools
1 compromised version
- Jun 20, 2022
Malware in flocktory
1 compromised version
- Jun 20, 2022
Malware in itop
1 compromised version
- Jun 20, 2022
Malware in digitalexam
1 compromised version
- Jun 20, 2022
Malware in gwac
1 compromised version
- Jun 20, 2022
Malicious code in aiweb (npm)
- Jun 20, 2022
Malicious code in com.huawei.app.module.pkg1 (npm)
- Jun 20, 2022
Malicious code in cmshow.qq.com (npm)
- Jun 20, 2022
Malicious code in caspets (npm)
- Jun 20, 2022
Malware in aiweb
1 compromised version
- Jun 20, 2022
Malware in caspets
1 compromised version
- Jun 20, 2022
Malware in com.huawei.app.module.pkg1
1 compromised version
- Jun 20, 2022
Malware in cmshow.qq.com
1 compromised version
- Jun 20, 2022
Malicious code in weixao (npm)
- Jun 20, 2022
Malicious code in simplesamlphp (npm)
- Jun 20, 2022
Malicious code in nixpsweb (npm)
- Jun 20, 2022
Malicious code in josquin-ribbon (npm)
Page 7128 of 7,293