Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,633 total · sorted newest first- Jun 20, 2022
Malware in mattermost-mobile
1 compromised version
- Jun 20, 2022
Malware in eslint-config-mattermost
1 compromised version
- Jun 20, 2022
Malware in mattermost-qa-automation
1 compromised version
- Jun 20, 2022
Malware in open-xchange-appsuite-spamexperts
1 compromised version
- Jun 20, 2022
Malicious code in mattermost-push-proxy (npm)
- Jun 20, 2022
Malicious code in mattermost-mobile-e2e (npm)
- Jun 20, 2022
Malicious code in mattermost-metrics-server (npm)
- Jun 20, 2022
Malicious code in mattermost-chrome-extension (npm)
- Jun 20, 2022
Malicious code in focalboard (npm)
- Jun 20, 2022
Malware in mattermost-push-proxy
1 compromised version
- Jun 20, 2022
Malware in mattermost-mobile-e2e
1 compromised version
- Jun 20, 2022
Malware in focalboard
1 compromised version
- Jun 20, 2022
Malware in mattermost-metrics-server
1 compromised version
- Jun 20, 2022
Malware in mattermost-chrome-extension
1 compromised version
- Jun 20, 2022
Malicious code in mstmeetings (npm)
- Jun 20, 2022
Malicious code in mattermost-webapp-profiling (npm)
- Jun 20, 2022
Malicious code in mattermost-plugin-docs (npm)
- Jun 20, 2022
Malicious code in mattermost-api-reference (npm)
- Jun 20, 2022
Malware in mattermost-webapp-profiling
1 compromised version
- Jun 20, 2022
Malware in mattermost-api-reference
1 compromised version
- Jun 20, 2022
Malware in mattermost-plugin-docs
1 compromised version
- Jun 20, 2022
Malware in mstmeetings
1 compromised version
- Jun 20, 2022
Malicious code in skype4business (npm)
- Jun 20, 2022
Malicious code in nextcloud-register (npm)
- Jun 20, 2022
Malicious code in nextcloud-mail (npm)
- Jun 20, 2022
Malicious code in firstrunwizard (npm)
- Jun 20, 2022
Malware in firstrunwizard
1 compromised version
- Jun 20, 2022
Malware in skype4business
1 compromised version
- Jun 20, 2022
Malware in nextcloud-mail
1 compromised version
- Jun 20, 2022
Malware in nextcloud-register
1 compromised version
- Jun 20, 2022
Malicious code in suspicious_login (npm)
- Jun 20, 2022
Malicious code in nextcloud-news (npm)
- Jun 20, 2022
Malicious code in nextcloud-cookbook (npm)
- Jun 20, 2022
Malicious code in nextcloud-activity (npm)
- Jun 20, 2022
Malware in nextcloud-cookbook
1 compromised version
- Jun 20, 2022
Malware in nextcloud-activity
1 compromised version
- Jun 20, 2022
Malware in suspicious_login
1 compromised version
- Jun 20, 2022
Malware in nextcloud-news
1 compromised version
- Jun 20, 2022
Malicious code in ojsxc (npm)
- Jun 20, 2022
Malicious code in officeonline (npm)
- Jun 20, 2022
Malicious code in nextcloudappstore (npm)
- Jun 20, 2022
Malicious code in nextcloud-js-tests (npm)
- Jun 20, 2022
Malware in officeonline
1 compromised version
- Jun 20, 2022
Malware in nextcloud-js-tests
1 compromised version
- Jun 20, 2022
Malware in ojsxc
1 compromised version
- Jun 20, 2022
Malware in nextcloudappstore
1 compromised version
- Jun 20, 2022
Malicious code in richdocuments (npm)
- Jun 20, 2022
Malicious code in lyft-node-sdk-example (npm)
- Jun 20, 2022
Malicious code in lightweight-android (npm)
- Jun 20, 2022
Malicious code in firestore-messagebird-send-msg (npm)
Page 7134 of 7,293