Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malware in com.unity.modules.umbra
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.ui
1 compromised version
- Jun 20, 2022
Malicious code in com.unity.modules.screencapture (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.physics (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.particlesystem (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.imageconversion (npm)
- Jun 20, 2022
Malware in com.unity.modules.particlesystem
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.physics
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.screencapture
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.imageconversion
1 compromised version
- Jun 20, 2022
Malicious code in com.unity.modules.director (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.cloth (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.audio (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.assetbundle (npm)
- Jun 20, 2022
Malware in com.unity.modules.cloth
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.director
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.audio
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.assetbundle
1 compromised version
- Jun 20, 2022
Malicious code in com.unity.package-manager-ui (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.animation (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.androidjni (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.ai (npm)
- Jun 20, 2022
Malware in com.unity.modules.ai
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.animation
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.androidjni
1 compromised version
- Jun 20, 2022
Malware in com.unity.package-manager-ui
1 compromised version
- Jun 20, 2022
Malicious code in adt-utils (npm)
- Jun 20, 2022
Malicious code in com.unity.ide.vscode (npm)
- Jun 20, 2022
Malicious code in com.unity.ide.rider (npm)
- Jun 20, 2022
Malicious code in com.unity.collab-proxy (npm)
- Jun 20, 2022
Malicious code in com.unity.2d.sprite (npm)
- Jun 20, 2022
Malware in com.unity.collab-proxy
1 compromised version
- Jun 20, 2022
Malware in com.unity.ide.vscode
1 compromised version
- Jun 20, 2022
Malware in com.unity.ide.rider
1 compromised version
- Jun 20, 2022
Malware in adt-utils
1 compromised version
- Jun 20, 2022
Malware in com.unity.2d.sprite
1 compromised version
- Jun 20, 2022
Malicious code in titanite-javascript (npm)
- Jun 20, 2022
Malicious code in huddles-ui-templates (npm)
- Jun 20, 2022
Malicious code in huddles (npm)
- Jun 20, 2022
Malware in huddles
1 compromised version
- Jun 20, 2022
Malware in titanite-javascript
1 compromised version
- Jun 20, 2022
Malware in huddles-ui-templates
1 compromised version
- Jun 20, 2022
Malicious code in acswidget-waterfall (npm)
- Jun 20, 2022
Malicious code in ssnap-web (npm)
- Jun 20, 2022
Malicious code in fc-datalayer (npm)
- Jun 20, 2022
Malicious code in eslint-config-hfd (npm)
- Jun 20, 2022
Malware in acswidget-waterfall
1 compromised version
- Jun 20, 2022
Malware in ssnap-web
1 compromised version
- Jun 20, 2022
Malware in fc-datalayer
1 compromised version
- Jun 20, 2022
Malware in eslint-config-hfd
1 compromised version
Page 7158 of 7,293