Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malware in qiwi-neutrino-presets
1 compromised version
- Jun 20, 2022
Malware in pijma-v2
1 compromised version
- Jun 20, 2022
Malicious code in wise_lena_bot_server (npm)
- Jun 20, 2022
Malicious code in test-task-react-client (npm)
- Jun 20, 2022
Malicious code in seal_online_node_server (npm)
- Jun 20, 2022
Malicious code in qiwi-widgets-landing (npm)
- Jun 20, 2022
Malware in wise_lena_bot_server
1 compromised version
- Jun 20, 2022
Malware in qiwi-widgets-landing
1 compromised version
- Jun 20, 2022
Malware in test-task-react-client
1 compromised version
- Jun 20, 2022
Malware in seal_online_node_server
1 compromised version
- Jun 20, 2022
Malicious code in yet-another-mutex (npm)
- Jun 20, 2022
Malicious code in meshblu-connector-arc-thermometer (npm)
- Jun 20, 2022
Malicious code in com.citrix.cordova.testapp (npm)
- Jun 20, 2022
Malicious code in citrixdeveloper-vscode (npm)
- Jun 20, 2022
Malware in citrixdeveloper-vscode
1 compromised version
- Jun 20, 2022
Malware in yet-another-mutex
1 compromised version
- Jun 20, 2022
Malware in meshblu-connector-arc-thermometer
1 compromised version
- Jun 20, 2022
Malware in com.citrix.cordova.testapp
1 compromised version
- Jun 20, 2022
Malicious code in react-pay-with-diem (npm)
- Jun 20, 2022
Malicious code in hxgenjs (npm)
- Jun 20, 2022
Malicious code in grpc-web-ci (npm)
- Jun 20, 2022
Malicious code in buildstamp-monorepo (npm)
- Jun 20, 2022
Malicious code in bchd-explorer (npm)
- Jun 20, 2022
Malware in bchd-explorer
1 compromised version
- Jun 20, 2022
Malware in react-pay-with-diem
1 compromised version
- Jun 20, 2022
Malware in hxgenjs
1 compromised version
- Jun 20, 2022
Malware in grpc-web-ci
1 compromised version
- Jun 20, 2022
Malware in buildstamp-monorepo
1 compromised version
- Jun 20, 2022
Malicious code in web-frontend (npm)
- Jun 20, 2022
Malicious code in twitter-webhook-boilerplate-node (npm)
- Jun 20, 2022
Malicious code in spotatweet (npm)
- Jun 20, 2022
Malicious code in remote-developer-jobs-analytics (npm)
- Jun 20, 2022
Malware in web-frontend
1 compromised version
- Jun 20, 2022
Malware in remote-developer-jobs-analytics
1 compromised version
- Jun 20, 2022
Malware in spotatweet
1 compromised version
- Jun 20, 2022
Malware in twitter-webhook-boilerplate-node
1 compromised version
- Jun 20, 2022
Malicious code in dr-json (npm)
- Jun 20, 2022
Malicious code in dodo-build (npm)
- Jun 20, 2022
Malicious code in com.innogames.asset-relations-viewer-addressables (npm)
- Jun 20, 2022
Malicious code in com.innogames.asset-relations-viewer (npm)
- Jun 20, 2022
Malware in com.innogames.asset-relations-viewer
1 compromised version
- Jun 20, 2022
Malware in com.innogames.asset-relations-viewer-addressables
1 compromised version
- Jun 20, 2022
Malware in dr-json
1 compromised version
- Jun 20, 2022
Malware in dodo-build
1 compromised version
- Jun 20, 2022
Malicious code in mrmax4o4 (npm)
- Jun 20, 2022
Malicious code in mrmax (npm)
- Jun 20, 2022
Malicious code in check-my-repo (npm)
- Jun 20, 2022
Malicious code in blank-ts-repo (npm)
- Jun 20, 2022
Malware in blank-ts-repo
1 compromised version
- Jun 20, 2022
Malware in check-my-repo
1 compromised version
Page 7142 of 7,293