Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malware in @harrysforge/breadcrumbs
1 compromised version
- Jun 20, 2022
Malware in idp-shared-node-library
1 compromised version
- Jun 20, 2022
Malicious code in okhsa (npm)
- Jun 20, 2022
Malicious code in idp-test-test-test (npm)
- Jun 20, 2022
Malicious code in idp-ssr-shell (npm)
- Jun 20, 2022
Malicious code in idp-core-upperfunnel (npm)
- Jun 20, 2022
Malware in idp-test-test-test
1 compromised version
- Jun 20, 2022
Malware in idp-core-upperfunnel
1 compromised version
- Jun 20, 2022
Malware in idp-ssr-shell
1 compromised version
- Jun 20, 2022
Malware in okhsa
1 compromised version
- Jun 20, 2022
Malicious code in klown (npm)
- Jun 20, 2022
Malicious code in eslint-plugin-flipper (npm)
- Jun 20, 2022
Malicious code in com.unity.uiwidgets (npm)
- Jun 20, 2022
Malicious code in com.unity.settings-manager (npm)
- Jun 20, 2022
Malware in com.unity.uiwidgets
1 compromised version
- Jun 20, 2022
Malware in com.unity.settings-manager
1 compromised version
- Jun 20, 2022
Malware in klown
1 compromised version
- Jun 20, 2022
Malware in eslint-plugin-flipper
1 compromised version
- Jun 20, 2022
Malicious code in com.unity.modules.xr (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.wind (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.vr (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.tilemap (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.physics2d (npm)
- Jun 20, 2022
Malware in com.unity.modules.tilemap
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.xr
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.vr
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.wind
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.physics2d
1 compromised version
- Jun 20, 2022
Malicious code in com.unity.modules.video (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.vehicles (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.unitywebrequestwww (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.unitywebrequesttexture (npm)
- Jun 20, 2022
Malware in com.unity.modules.video
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.unitywebrequesttexture
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.vehicles
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.unitywebrequestwww
1 compromised version
- Jun 20, 2022
Malicious code in com.unity.modules.unitywebrequestaudio (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.unitywebrequestassetbundle (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.unitywebrequest (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.unityanalytics (npm)
- Jun 20, 2022
Malware in com.unity.modules.unitywebrequestaudio
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.unityanalytics
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.unitywebrequestassetbundle
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.unitywebrequest
1 compromised version
- Jun 20, 2022
Malicious code in com.unity.modules.umbra (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.uielements (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.ui (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.terrainphysics (npm)
- Jun 20, 2022
Malware in com.unity.modules.uielements
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.terrainphysics
1 compromised version
Page 7157 of 7,293