Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malicious code in typescript-action (npm)
- Jun 20, 2022
Malicious code in lclbeautyboutiqueprod (npm)
- Jun 20, 2022
Malicious code in callrail_eks (npm)
- Jun 20, 2022
Malicious code in callrail-package-cleanup (npm)
- Jun 20, 2022
Malware in callrail-package-cleanup
1 compromised version
- Jun 20, 2022
Malware in lclbeautyboutiqueprod
1 compromised version
- Jun 20, 2022
Malware in callrail_eks
1 compromised version
- Jun 20, 2022
Malware in typescript-action
1 compromised version
- Jun 20, 2022
Malicious code in hello-kubeless (npm)
- Jun 20, 2022
Malicious code in gulp-pypugjs (npm)
- Jun 20, 2022
Malicious code in grabathon-v7 (npm)
- Jun 20, 2022
Malicious code in github-action-benchmark (npm)
- Jun 20, 2022
Malware in gulp-pypugjs
1 compromised version
- Jun 20, 2022
Malware in grabathon-v7
1 compromised version
- Jun 20, 2022
Malware in github-action-benchmark
1 compromised version
- Jun 20, 2022
Malware in hello-kubeless
1 compromised version
- Jun 20, 2022
Malicious code in amnotacat (npm)
- Jun 20, 2022
Malicious code in adobetagmanager (npm)
- Jun 20, 2022
Malicious code in popover2 (npm)
- Jun 20, 2022
Malicious code in docs-data (npm)
- Jun 20, 2022
Malware in amnotacat
1 compromised version
- Jun 20, 2022
Malware in docs-data
1 compromised version
- Jun 20, 2022
Malware in adobetagmanager
1 compromised version
- Jun 20, 2022
Malware in popover2
1 compromised version
- Jun 20, 2022
Malicious code in sourcekit-lsp (npm)
- Jun 20, 2022
Malicious code in hybrismetrics (npm)
- Jun 20, 2022
Malicious code in eslint-plugin-amphtml-internal (npm)
- Jun 20, 2022
Malicious code in doyentest (npm)
- Jun 20, 2022
Malware in doyentest
1 compromised version
- Jun 20, 2022
Malware in sourcekit-lsp
1 compromised version
- Jun 20, 2022
Malware in eslint-plugin-amphtml-internal
1 compromised version
- Jun 20, 2022
Malware in hybrismetrics
1 compromised version
- Jun 20, 2022
Malicious code in test-za-sec-psh (npm)
- Jun 20, 2022
Malicious code in oz-select-lib2 (npm)
- Jun 20, 2022
Malicious code in kg_portal (npm)
- Jun 20, 2022
Malicious code in ember-dev (npm)
- Jun 20, 2022
Malicious code in elemental-layout (npm)
- Jun 20, 2022
Malware in elemental-layout
1 compromised version
- Jun 20, 2022
Malware in kg_portal
1 compromised version
- Jun 20, 2022
Malware in oz-select-lib2
1 compromised version
- Jun 20, 2022
Malware in test-za-sec-psh
1 compromised version
- Jun 20, 2022
Malware in ember-dev
1 compromised version
- Jun 20, 2022
Malicious code in uber-i18n (npm)
- Jun 20, 2022
Malicious code in tochka-cyclops-api (npm)
- Jun 20, 2022
Malicious code in ozone-api (npm)
- Jun 20, 2022
Malicious code in billpay-mobile (npm)
- Jun 20, 2022
Malware in ozone-api
1 compromised version
- Jun 20, 2022
Malware in tochka-cyclops-api
1 compromised version
- Jun 20, 2022
Malware in billpay-mobile
1 compromised version
- Jun 20, 2022
Malware in uber-i18n
1 compromised version
Page 7147 of 7,293