Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malicious code in afeit (npm)
- Jun 20, 2022
Malicious code in twitterstreamingdemo (npm)
- Jun 20, 2022
Malicious code in 47cliens_server (npm)
- Jun 20, 2022
Malicious code in comment-watch-bot (npm)
- Jun 20, 2022
Malicious code in blank-ts-monorepo (npm)
- Jun 20, 2022
Malware in comment-watch-bot
1 compromised version
- Jun 20, 2022
Malware in afeit
1 compromised version
- Jun 20, 2022
Malware in 47cliens_server
1 compromised version
- Jun 20, 2022
Malware in twitterstreamingdemo
1 compromised version
- Jun 20, 2022
Malware in blank-ts-monorepo
1 compromised version
- Jun 20, 2022
Malicious code in inno-basic-server (npm)
- Jun 20, 2022
Malicious code in friendstimeline (npm)
- Jun 20, 2022
Malicious code in flp-njs (npm)
- Jun 20, 2022
Malicious code in envcomparator (npm)
- Jun 20, 2022
Malware in envcomparator
1 compromised version
- Jun 20, 2022
Malware in flp-njs
1 compromised version
- Jun 20, 2022
Malware in friendstimeline
1 compromised version
- Jun 20, 2022
Malware in inno-basic-server
1 compromised version
- Jun 20, 2022
Malicious code in ruby-on-rails-example (npm)
- Jun 20, 2022
Malicious code in find-legislators-web (npm)
- Jun 20, 2022
Malicious code in charting-library-react-example (npm)
- Jun 20, 2022
Malicious code in charting-library-angular5 (npm)
- Jun 20, 2022
Malware in charting-library-react-example
1 compromised version
- Jun 20, 2022
Malware in find-legislators-web
1 compromised version
- Jun 20, 2022
Malware in charting-library-angular5
1 compromised version
- Jun 20, 2022
Malware in ruby-on-rails-example
1 compromised version
- Jun 20, 2022
Malicious code in tracker-radar (npm)
- Jun 20, 2022
Malicious code in duckduckhack.com (npm)
- Jun 20, 2022
Malicious code in duckduckgo_plus (npm)
- Jun 20, 2022
Malicious code in ddg_community_platform (npm)
- Jun 20, 2022
Malware in duckduckhack.com
1 compromised version
- Jun 20, 2022
Malware in duckduckgo_plus
1 compromised version
- Jun 20, 2022
Malware in tracker-radar
1 compromised version
- Jun 20, 2022
Malware in ddg_community_platform
1 compromised version
- Jun 20, 2022
Malicious code in zeroclickinfo-goodies (npm)
- Jun 20, 2022
Malicious code in epamgithubio-bootstrap (npm)
- Jun 20, 2022
Malicious code in e-openflow (npm)
- Jun 20, 2022
Malicious code in angular-dev-test (npm)
- Jun 20, 2022
Malware in e-openflow
1 compromised version
- Jun 20, 2022
Malware in angular-dev-test
1 compromised version
- Jun 20, 2022
Malware in epamgithubio-bootstrap
1 compromised version
- Jun 20, 2022
Malware in zeroclickinfo-goodies
1 compromised version
- Jun 20, 2022
Malicious code in wdl-workspace (npm)
- Jun 20, 2022
Malicious code in new-corgi (npm)
- Jun 20, 2022
Malicious code in near-nftchecker (npm)
- Jun 20, 2022
Malicious code in near-api-server (npm)
- Jun 20, 2022
Malicious code in firecloud-ui (npm)
- Jun 20, 2022
Malware in near-api-server
1 compromised version
- Jun 20, 2022
Malware in wdl-workspace
1 compromised version
- Jun 20, 2022
Malware in near-nftchecker
1 compromised version
Page 7144 of 7,293