Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malicious code in tracker-surrogates (npm)
- Jun 20, 2022
Malicious code in tracker-radar-collector (npm)
- Jun 20, 2022
Malicious code in snarky-js (npm)
- Jun 20, 2022
Malicious code in react-optimization (npm)
- Jun 20, 2022
Malicious code in duckduckgo-styles (npm)
- Jun 20, 2022
Malware in tracker-surrogates
1 compromised version
- Jun 20, 2022
Malware in tracker-radar-collector
1 compromised version
- Jun 20, 2022
Malware in duckduckgo-styles
1 compromised version
- Jun 20, 2022
Malware in snarky-js
1 compromised version
- Jun 20, 2022
Malware in react-optimization
1 compromised version
- Jun 20, 2022
Malicious code in mina-web3 (npm)
- Jun 20, 2022
Malicious code in hello-oauth-node (npm)
- Jun 20, 2022
Malicious code in docs-2 (npm)
- Jun 20, 2022
Malware in docs-2
1 compromised version
- Jun 20, 2022
Malware in hello-oauth-node
1 compromised version
- Jun 20, 2022
Malware in mina-web3
1 compromised version
- Jun 20, 2022
Malicious code in zkthemes (npm)
- Jun 20, 2022
Malicious code in withboard (npm)
- Jun 20, 2022
Malicious code in serverless-api-partners (npm)
- Jun 20, 2022
Malicious code in reddit-client-lib (npm)
- Jun 20, 2022
Malicious code in launchdarkly (npm)
- Jun 20, 2022
Malware in zkthemes
1 compromised version
- Jun 20, 2022
Malware in reddit-client-lib
1 compromised version
- Jun 20, 2022
Malware in withboard
1 compromised version
- Jun 20, 2022
Malware in serverless-api-partners
1 compromised version
- Jun 20, 2022
Malware in launchdarkly
1 compromised version
- Jun 20, 2022
Malicious code in vscode-stripe (npm)
- Jun 20, 2022
Malicious code in myjohndeereapi-oauth2-nodejs-example (npm)
- Jun 20, 2022
Malicious code in myetherwallet (npm)
- Jun 20, 2022
Malicious code in firestore-stripe-payments-js (npm)
- Jun 20, 2022
Malware in myetherwallet
1 compromised version
- Jun 20, 2022
Malware in myjohndeereapi-oauth2-nodejs-example
1 compromised version
- Jun 20, 2022
Malware in firestore-stripe-payments-js
1 compromised version
- Jun 20, 2022
Malware in vscode-stripe
1 compromised version
- Jun 20, 2022
Malicious code in xendke-io (npm)
- Jun 20, 2022
Malicious code in superapp-sdk (npm)
- Jun 20, 2022
Malicious code in snapshot-hub (npm)
- Jun 20, 2022
Malicious code in paypal-sdk-spec (npm)
- Jun 20, 2022
Malware in superapp-sdk
1 compromised version
- Jun 20, 2022
Malware in paypal-sdk-spec
1 compromised version
- Jun 20, 2022
Malware in xendke-io
1 compromised version
- Jun 20, 2022
Malware in snapshot-hub
1 compromised version
- Jun 20, 2022
Malicious code in tslint-test-configs (npm)
- Jun 20, 2022
Malicious code in landing-app (npm)
- Jun 20, 2022
Malicious code in eslint-config-dev-palantir (npm)
- Jun 20, 2022
Malicious code in eclipse-tslint (npm)
- Jun 20, 2022
Malware in eclipse-tslint
1 compromised version
- Jun 20, 2022
Malware in landing-app
1 compromised version
- Jun 20, 2022
Malware in tslint-test-configs
1 compromised version
- Jun 20, 2022
Malware in eslint-config-dev-palantir
1 compromised version
Page 7146 of 7,293