Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malware in klow
1 compromised version
- Jun 20, 2022
Malware in telescope-avatar
1 compromised version
- Jun 20, 2022
Malicious code in @harrysforge/universal-analytics-enhanced-ecommerce (npm)
- Jun 20, 2022
Malicious code in @harrysforge/transition (npm)
- Jun 20, 2022
Malicious code in @harrysforge/tooltip (npm)
- Jun 20, 2022
Malicious code in @harrysforge/token-provider (npm)
- Jun 20, 2022
Malware in @harrysforge/universal-analytics-enhanced-ecommerce
1 compromised version
- Jun 20, 2022
Malware in @harrysforge/transition
1 compromised version
- Jun 20, 2022
Malware in @harrysforge/tooltip
1 compromised version
- Jun 20, 2022
Malware in @harrysforge/token-provider
1 compromised version
- Jun 20, 2022
Malicious code in @harrysforge/text (npm)
- Jun 20, 2022
Malicious code in @harrysforge/subscription-sdk (npm)
- Jun 20, 2022
Malicious code in @harrysforge/storage (npm)
- Jun 20, 2022
Malicious code in @harrysforge/slide-in (npm)
- Jun 20, 2022
Malware in @harrysforge/subscription-sdk
1 compromised version
- Jun 20, 2022
Malware in @harrysforge/storage
1 compromised version
- Jun 20, 2022
Malware in @harrysforge/text
1 compromised version
- Jun 20, 2022
Malware in @harrysforge/slide-in
1 compromised version
- Jun 20, 2022
Malicious code in @harrysforge/select (npm)
- Jun 20, 2022
Malicious code in @harrysforge/product-displays (npm)
- Jun 20, 2022
Malicious code in @harrysforge/number-stepper (npm)
- Jun 20, 2022
Malicious code in @harrysforge/media-hero (npm)
- Jun 20, 2022
Malicious code in @harrysforge/input-field (npm)
- Jun 20, 2022
Malware in @harrysforge/number-stepper
1 compromised version
- Jun 20, 2022
Malware in @harrysforge/select
1 compromised version
- Jun 20, 2022
Malware in @harrysforge/product-displays
1 compromised version
- Jun 20, 2022
Malware in @harrysforge/media-hero
1 compromised version
- Jun 20, 2022
Malware in @harrysforge/input-field
1 compromised version
- Jun 20, 2022
Malicious code in @harrysforge/icon (npm)
- Jun 20, 2022
Malicious code in @harrysforge/grid (npm)
- Jun 20, 2022
Malicious code in @harrysforge/generate-media-queries (npm)
- Jun 20, 2022
Malicious code in @harrysforge/gatsby-theme-experiment-manager (npm)
- Jun 20, 2022
Malware in @harrysforge/icon
1 compromised version
- Jun 20, 2022
Malware in @harrysforge/generate-media-queries
1 compromised version
- Jun 20, 2022
Malware in @harrysforge/gatsby-theme-experiment-manager
1 compromised version
- Jun 20, 2022
Malware in @harrysforge/grid
1 compromised version
- Jun 20, 2022
Malicious code in @harrysforge/gatsby-theme-cart (npm)
- Jun 20, 2022
Malicious code in @harrysforge/gatsby-plugin-bugsnag (npm)
- Jun 20, 2022
Malicious code in @harrysforge/currency (npm)
- Jun 20, 2022
Malicious code in @harrysforge/checkbox (npm)
- Jun 20, 2022
Malicious code in @harrysforge/button (npm)
- Jun 20, 2022
Malware in @harrysforge/checkbox
1 compromised version
- Jun 20, 2022
Malware in @harrysforge/button
1 compromised version
- Jun 20, 2022
Malware in @harrysforge/gatsby-plugin-bugsnag
1 compromised version
- Jun 20, 2022
Malware in @harrysforge/currency
1 compromised version
- Jun 20, 2022
Malware in @harrysforge/gatsby-theme-cart
1 compromised version
- Jun 20, 2022
Malicious code in idp-shared-node-library (npm)
- Jun 20, 2022
Malicious code in @harrysforge/breadcrumbs (npm)
- Jun 20, 2022
Malicious code in @harrysforge/accordion (npm)
- Jun 20, 2022
Malware in @harrysforge/accordion
1 compromised version
Page 7156 of 7,293