Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malicious code in @atlasmonorepo/atlas-custom-behaviour (npm)
- Jun 20, 2022
Malicious code in growthy_sdk_web_pod (npm)
- Jun 20, 2022
Malware in airbnb-moment-more-formats
1 compromised version
- Jun 20, 2022
Malware in growthy_sdk_web_pod
1 compromised version
- Jun 20, 2022
Malware in airbnb-geetest3
1 compromised version
- Jun 20, 2022
Malware in @atlasmonorepo/atlas-custom-behaviour
1 compromised version
- Jun 20, 2022
Malicious code in @atlasmonorepo/website-overview (npm)
- Jun 20, 2022
Malicious code in @atlasmonorepo/email-wizard (npm)
- Jun 20, 2022
Malicious code in @atlasmonorepo/atlas-shared-components (npm)
- Jun 20, 2022
Malicious code in @atlasmonorepo/atlas-base-service (npm)
- Jun 20, 2022
Malware in @atlasmonorepo/email-wizard
1 compromised version
- Jun 20, 2022
Malware in @atlasmonorepo/website-overview
1 compromised version
- Jun 20, 2022
Malware in @atlasmonorepo/atlas-shared-components
1 compromised version
- Jun 20, 2022
Malware in @atlasmonorepo/atlas-base-service
1 compromised version
- Jun 20, 2022
Malicious code in website-overview (npm)
- Jun 20, 2022
Malicious code in atlas-shared-components (npm)
- Jun 20, 2022
Malicious code in atlas-custom-behaviour (npm)
- Jun 20, 2022
Malicious code in atlas-base-service (npm)
- Jun 20, 2022
Malware in atlas-shared-components
1 compromised version
- Jun 20, 2022
Malware in atlas-custom-behaviour
1 compromised version
- Jun 20, 2022
Malware in website-overview
1 compromised version
- Jun 20, 2022
Malware in atlas-base-service
1 compromised version
- Jun 20, 2022
Malicious code in nsg-setclient (npm)
- Jun 20, 2022
Malicious code in email-wizard (npm)
- Jun 20, 2022
Malicious code in circle-admin-web-app (npm)
- Jun 20, 2022
Malicious code in browser-warning-ui (npm)
- Jun 20, 2022
Malicious code in bento-modern (npm)
- Jun 20, 2022
Malware in browser-warning-ui
1 compromised version
- Jun 20, 2022
Malware in email-wizard
1 compromised version
- Jun 20, 2022
Malware in nsg-setclient
1 compromised version
- Jun 20, 2022
Malware in circle-admin-web-app
1 compromised version
- Jun 20, 2022
Malware in bento-modern
1 compromised version
- Jun 20, 2022
Malicious code in test-code-0121 (npm)
- Jun 20, 2022
Malicious code in test-code-012 (npm)
- Jun 20, 2022
Malware in test-code-012
1 compromised version
- Jun 20, 2022
Malware in test-code-0121
1 compromised version
- Jun 20, 2022
Malicious code in vcpkg-cmake-config (npm)
- Jun 20, 2022
Malicious code in vcpkg-cmake (npm)
- Jun 20, 2022
Malicious code in test-code-01x (npm)
- Jun 20, 2022
Malicious code in test-code-012111 (npm)
- Jun 20, 2022
Malicious code in test-code-01211 (npm)
- Jun 20, 2022
Malware in vcpkg-cmake
1 compromised version
- Jun 20, 2022
Malware in vcpkg-cmake-config
1 compromised version
- Jun 20, 2022
Malware in test-code-012111
1 compromised version
- Jun 20, 2022
Malware in test-code-01211
1 compromised version
- Jun 20, 2022
Malware in test-code-01x
1 compromised version
- Jun 20, 2022
Malicious code in whiteline (npm)
- Jun 20, 2022
Malicious code in nsg-epa (npm)
- Jun 20, 2022
Malicious code in ns-nfactor (npm)
- Jun 20, 2022
Malicious code in legacycloudkitresolutionserviceprotocol (npm)
Page 7152 of 7,293