Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malicious code in ozone-material (npm)
- Jun 20, 2022
Malicious code in ozone-logic (npm)
- Jun 20, 2022
Malicious code in ozone-helper (npm)
- Jun 20, 2022
Malicious code in microsoft-internq (npm)
- Jun 20, 2022
Malware in ozone-logic
1 compromised version
- Jun 20, 2022
Malware in microsoft-internq
1 compromised version
- Jun 20, 2022
Malware in ozone-material
1 compromised version
- Jun 20, 2022
Malware in ozone-helper
1 compromised version
- Jun 20, 2022
Malicious code in wavoip (npm)
- Jun 20, 2022
Malicious code in ql-win32 (npm)
- Jun 20, 2022
Malicious code in omar-evil-test-rpp (npm)
- Jun 20, 2022
Malicious code in debugger-evil-lib (npm)
- Jun 20, 2022
Malware in omar-evil-test-rpp
1 compromised version
- Jun 20, 2022
Malware in debugger-evil-lib
1 compromised version
- Jun 20, 2022
Malware in ql-win32
1 compromised version
- Jun 20, 2022
Malware in wavoip
1 compromised version
- Jun 20, 2022
Malicious code in @xjs-shared-components/all-components (npm)
- Jun 20, 2022
Malicious code in @bootstrap-base-nabtrade-design/components (npm)
- Jun 20, 2022
Malicious code in @bootstrap-base-managed-designs/bootstrap-nabtraderedesign (npm)
- Jun 20, 2022
Malicious code in @bootstrap-base-design/bootstrap-base (npm)
- Jun 20, 2022
Malware in @xjs-shared-components/all-components
1 compromised version
- Jun 20, 2022
Malware in @bootstrap-base-nabtrade-design/components
1 compromised version
- Jun 20, 2022
Malware in @bootstrap-base-design/bootstrap-base
1 compromised version
- Jun 20, 2022
Malware in @bootstrap-base-managed-designs/bootstrap-nabtraderedesign
1 compromised version
- Jun 20, 2022
Malicious code in nab-trade (npm)
- Jun 20, 2022
Malicious code in @nab-trade/mnt-prod (npm)
- Jun 20, 2022
Malicious code in bootstrap-nabtraderedesign (npm)
- Jun 20, 2022
Malicious code in bootstrap-base-managed-designs (npm)
- Jun 20, 2022
Malware in @nab-trade/mnt-prod
1 compromised version
- Jun 20, 2022
Malware in bootstrap-base-managed-designs
1 compromised version
- Jun 20, 2022
Malware in bootstrap-nabtraderedesign
1 compromised version
- Jun 20, 2022
Malware in nab-trade
1 compromised version
- Jun 20, 2022
Malicious code in @unpkg-semver/pedops-logger (npm)
- Jun 20, 2022
Malicious code in common-xc-frontend (npm)
- Jun 20, 2022
Malicious code in bootstrap-base-nabtrade-design (npm)
- Jun 20, 2022
Malicious code in bootstrap-base-design (npm)
- Jun 20, 2022
Malware in @unpkg-semver/pedops-logger
1 compromised version
- Jun 20, 2022
Malware in common-xc-frontend
1 compromised version
- Jun 20, 2022
Malware in bootstrap-base-nabtrade-design
1 compromised version
- Jun 20, 2022
Malware in bootstrap-base-design
1 compromised version
- Jun 20, 2022
Malicious code in adc-harness-state (npm)
- Jun 20, 2022
Malicious code in wix-react-dealer-viewer (npm)
- Jun 20, 2022
Malicious code in wix-chatbot-common (npm)
- Jun 20, 2022
Malicious code in @unpkg-semver/wix-recorder (npm)
- Jun 20, 2022
Malicious code in @devcrypto/hdwallet-provider (npm)
- Jun 20, 2022
Malware in wix-react-dealer-viewer
1 compromised version
- Jun 20, 2022
Malware in @devcrypto/hdwallet-provider
1 compromised version
- Jun 20, 2022
Malware in @unpkg-semver/wix-recorder
1 compromised version
- Jun 20, 2022
Malware in wix-chatbot-common
1 compromised version
- Jun 20, 2022
Malware in adc-harness-state
1 compromised version
Page 7148 of 7,293