Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malware in blockly-samples
1 compromised version
- Jun 20, 2022
Malware in capacitybot-cf-nodejs-fct
1 compromised version
- Jun 20, 2022
Malicious code in doodleio (npm)
- Jun 20, 2022
Malicious code in crisis-info-hub (npm)
- Jun 20, 2022
Malicious code in creative-screenshots (npm)
- Jun 20, 2022
Malicious code in coding-with-chrome-lib (npm)
- Jun 20, 2022
Malicious code in coding-with-chrome (npm)
- Jun 20, 2022
Malware in coding-with-chrome-lib
1 compromised version
- Jun 20, 2022
Malware in doodleio
1 compromised version
- Jun 20, 2022
Malware in coding-with-chrome
1 compromised version
- Jun 20, 2022
Malware in creative-screenshots
1 compromised version
- Jun 20, 2022
Malware in crisis-info-hub
1 compromised version
- Jun 20, 2022
Malicious code in elements-sk-local (npm)
- Jun 20, 2022
Malicious code in eclipse-megamovie-build (npm)
- Jun 20, 2022
Malicious code in dv360_spend_monitoring_tool (npm)
- Jun 20, 2022
Malicious code in dv360_feature_adoption (npm)
- Jun 20, 2022
Malware in eclipse-megamovie-build
1 compromised version
- Jun 20, 2022
Malware in dv360_feature_adoption
1 compromised version
- Jun 20, 2022
Malware in elements-sk-local
1 compromised version
- Jun 20, 2022
Malware in dv360_spend_monitoring_tool
1 compromised version
- Jun 20, 2022
Malicious code in firebase-wiki (npm)
- Jun 20, 2022
Malicious code in energy-strategies (npm)
- Jun 20, 2022
Malicious code in emoji-scavenger-hunt (npm)
- Jun 20, 2022
Malicious code in eleventy-high-performance-blog (npm)
- Jun 20, 2022
Malware in eleventy-high-performance-blog
1 compromised version
- Jun 20, 2022
Malware in firebase-wiki
1 compromised version
- Jun 20, 2022
Malware in emoji-scavenger-hunt
1 compromised version
- Jun 20, 2022
Malware in energy-strategies
1 compromised version
- Jun 20, 2022
Malicious code in googleioweb (npm)
- Jun 20, 2022
Malicious code in gae-scaffold (npm)
- Jun 20, 2022
Malicious code in fusion-tables-drive-export (npm)
- Jun 20, 2022
Malicious code in fusion-tables-archive-visualizer (npm)
- Jun 20, 2022
Malicious code in fuchsiaware (npm)
- Jun 20, 2022
Malware in gae-scaffold
1 compromised version
- Jun 20, 2022
Malware in fusion-tables-drive-export
1 compromised version
- Jun 20, 2022
Malware in fuchsiaware
1 compromised version
- Jun 20, 2022
Malware in fusion-tables-archive-visualizer
1 compromised version
- Jun 20, 2022
Malware in googleioweb
1 compromised version
- Jun 20, 2022
Malicious code in inspector-spacetime (npm)
- Jun 20, 2022
Malicious code in gvisor-website (npm)
- Jun 20, 2022
Malicious code in googlesitekit (npm)
- Jun 20, 2022
Malware in inspector-spacetime
1 compromised version
- Jun 20, 2022
Malware in googlesitekit
1 compromised version
- Jun 20, 2022
Malware in gvisor-website
1 compromised version
- Jun 20, 2022
Malicious code in mirror-branch-action (npm)
- Jun 20, 2022
Malicious code in libhidtelephony (npm)
- Jun 20, 2022
Malicious code in language-jsonnet (npm)
- Jun 20, 2022
Malicious code in instanthangouts (npm)
- Jun 20, 2022
Malware in language-jsonnet
1 compromised version
- Jun 20, 2022
Malware in libhidtelephony
1 compromised version
Page 7140 of 7,293