Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malware in firecloud-ui
1 compromised version
- Jun 20, 2022
Malware in new-corgi
1 compromised version
- Jun 20, 2022
Malicious code in ace_authorization_server (npm)
- Jun 20, 2022
Malicious code in mintgate (npm)
- Jun 20, 2022
Malicious code in epam-timebase-datasource (npm)
- Jun 20, 2022
Malware in ace_authorization_server
1 compromised version
- Jun 20, 2022
Malware in mintgate
1 compromised version
- Jun 20, 2022
Malware in epam-timebase-datasource
1 compromised version
- Jun 20, 2022
Malicious code in zkcalendardemo (npm)
- Jun 20, 2022
Malicious code in zkcalendar (npm)
- Jun 20, 2022
Malicious code in zk-build-utils (npm)
- Jun 20, 2022
Malicious code in check-pr-files (npm)
- Jun 20, 2022
Malicious code in appsforhere (npm)
- Jun 20, 2022
Malware in zk-build-utils
1 compromised version
- Jun 20, 2022
Malware in appsforhere
1 compromised version
- Jun 20, 2022
Malware in zkcalendar
1 compromised version
- Jun 20, 2022
Malware in zkcalendardemo
1 compromised version
- Jun 20, 2022
Malware in check-pr-files
1 compromised version
- Jun 20, 2022
Malicious code in vscode-zk-autocomplete (npm)
- Jun 20, 2022
Malicious code in sncicd-tests-run (npm)
- Jun 20, 2022
Malicious code in sncicd-plugin-activate (npm)
- Jun 20, 2022
Malicious code in sncicd-install-app (npm)
- Jun 20, 2022
Malware in sncicd-install-app
1 compromised version
- Jun 20, 2022
Malware in sncicd-plugin-activate
1 compromised version
- Jun 20, 2022
Malware in sncicd-tests-run
1 compromised version
- Jun 20, 2022
Malware in vscode-zk-autocomplete
1 compromised version
- Jun 20, 2022
Malicious code in tslint-blueprint-palantir (npm)
- Jun 20, 2022
Malicious code in servicenow_cicd_azuredevops (npm)
- Jun 20, 2022
Malicious code in integration-spec-test (npm)
- Jun 20, 2022
Malicious code in heapview (npm)
- Jun 20, 2022
Malware in tslint-blueprint-palantir
1 compromised version
- Jun 20, 2022
Malware in servicenow_cicd_azuredevops
1 compromised version
- Jun 20, 2022
Malware in heapview
1 compromised version
- Jun 20, 2022
Malware in integration-spec-test
1 compromised version
- Jun 20, 2022
Malicious code in the-clojure-worker (npm)
- Jun 20, 2022
Malicious code in super-rentals (npm)
- Jun 20, 2022
Malicious code in rfcs-tooling (npm)
- Jun 20, 2022
Malicious code in record-data-encapsulation-test-app (npm)
- Jun 20, 2022
Malicious code in ember-getowner-polyfill.import (npm)
- Jun 20, 2022
Malware in super-rentals
1 compromised version
- Jun 20, 2022
Malware in rfcs-tooling
1 compromised version
- Jun 20, 2022
Malware in the-clojure-worker
1 compromised version
- Jun 20, 2022
Malware in ember-getowner-polyfill.import
1 compromised version
- Jun 20, 2022
Malware in record-data-encapsulation-test-app
1 compromised version
- Jun 20, 2022
Malicious code in shippo-frontend (npm)
- Jun 20, 2022
Malicious code in privacy-test-pages (npm)
- Jun 20, 2022
Malicious code in ember-font-awesome.no-fa-prefix (npm)
- Jun 20, 2022
Malware in ember-font-awesome.no-fa-prefix
1 compromised version
- Jun 20, 2022
Malware in privacy-test-pages
1 compromised version
- Jun 20, 2022
Malware in shippo-frontend
1 compromised version
Page 7145 of 7,293