Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,688 total · sorted newest first- Jun 20, 2022
Malware in conjure-typescript-runtime
1 compromised version
- Jun 20, 2022
Malware in conjure-receipe-example-app
1 compromised version
- Jun 20, 2022
Malware in test-react15
1 compromised version
- Jun 20, 2022
Malware in blueprintjs-monorepo
1 compromised version
- Jun 20, 2022
Malware in phishcatch
1 compromised version
- Jun 20, 2022
Malicious code in sdm.checkout (npm)
- Jun 20, 2022
Malicious code in react-full-stack-starter-client (npm)
- Jun 20, 2022
Malicious code in invlid-tools (npm)
- Jun 20, 2022
Malicious code in grunt-tslint-eslint-config-palantir (npm)
- Jun 20, 2022
Malware in invlid-tools
1 compromised version
- Jun 20, 2022
Malware in react-full-stack-starter-client
1 compromised version
- Jun 20, 2022
Malware in sdm.checkout
1 compromised version
- Jun 20, 2022
Malware in grunt-tslint-eslint-config-palantir
1 compromised version
- Jun 20, 2022
Malicious code in table-dev-app (npm)
- Jun 20, 2022
Malicious code in stylelint-config-monorepo-palantir (npm)
- Jun 20, 2022
Malicious code in policy-bot (npm)
- Jun 20, 2022
Malicious code in meteor-spyfall (npm)
- Jun 20, 2022
Malware in table-dev-app
1 compromised version
- Jun 20, 2022
Malware in stylelint-config-monorepo-palantir
1 compromised version
- Jun 20, 2022
Malware in policy-bot
1 compromised version
- Jun 20, 2022
Malware in meteor-spyfall
1 compromised version
- Jun 20, 2022
Malicious code in target-global-mbox (npm)
- Jun 20, 2022
Malicious code in gitlab-linter-cli (npm)
- Jun 20, 2022
Malicious code in digital-pharmacy (npm)
- Jun 20, 2022
Malicious code in aoe_playstyle (npm)
- Jun 20, 2022
Malware in gitlab-linter-cli
1 compromised version
- Jun 20, 2022
Malware in digital-pharmacy
1 compromised version
- Jun 20, 2022
Malware in target-global-mbox
1 compromised version
- Jun 20, 2022
Malware in aoe_playstyle
1 compromised version
- Jun 20, 2022
Malicious code in walmart-cfs (npm)
- Jun 20, 2022
Malicious code in my-store.min.js (npm)
- Jun 20, 2022
Malicious code in my-store.min (npm)
- Jun 20, 2022
Malicious code in covid19app (npm)
- Jun 20, 2022
Malware in walmart-cfs
1 compromised version
- Jun 20, 2022
Malware in my-store.min
1 compromised version
- Jun 20, 2022
Malware in my-store.min.js
1 compromised version
- Jun 20, 2022
Malware in covid19app
1 compromised version
- Jun 20, 2022
Malicious code in wmreact-analytics (npm)
- Jun 20, 2022
Malicious code in samsmx-inventory (npm)
- Jun 20, 2022
Malicious code in global-order-tracker (npm)
- Jun 20, 2022
Malicious code in aura-transportation-driver-messaging (npm)
- Jun 20, 2022
Malware in global-order-tracker
1 compromised version
- Jun 20, 2022
Malware in samsmx-inventory
1 compromised version
- Jun 20, 2022
Malware in aura-transportation-driver-messaging
1 compromised version
- Jun 20, 2022
Malware in wmreact-analytics
1 compromised version
- Jun 20, 2022
Malicious code in wfs-lite-app (npm)
- Jun 20, 2022
Malicious code in wfs-admin-test (npm)
- Jun 20, 2022
Malicious code in training-platform-web (npm)
- Jun 20, 2022
Malicious code in asdaoptimaadmin (npm)
- Jun 20, 2022
Malware in wfs-lite-app
1 compromised version
Page 7133 of 7,294