Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 20, 2022
Malicious code in now-dashboard-analyze (npm)
- Jun 20, 2022
Malicious code in microsoft-intern (npm)
- Jun 20, 2022
Malicious code in it-advisor-webclient (npm)
- Jun 20, 2022
Malicious code in calc_8t54md4jfe (npm)
- Jun 20, 2022
Malware in calc_8t54md4jfe
1 compromised version
- Jun 20, 2022
Malware in it-advisor-webclient
1 compromised version
- Jun 20, 2022
Malware in microsoft-intern
1 compromised version
- Jun 20, 2022
Malware in now-dashboard-analyze
1 compromised version
- Jun 20, 2022
Malicious code in xienimnew (npm)
- Jun 20, 2022
Malicious code in calculator_artificialinteligence (npm)
- Jun 20, 2022
Malicious code in calc_ey6ts1s5ll (npm)
- Jun 20, 2022
Malicious code in calc_bx9d74rupg (npm)
- Jun 20, 2022
Malware in calc_ey6ts1s5ll
1 compromised version
- Jun 20, 2022
Malware in xienimnew
1 compromised version
- Jun 20, 2022
Malware in calc_bx9d74rupg
1 compromised version
- Jun 20, 2022
Malware in calculator_artificialinteligence
1 compromised version
- Jun 20, 2022
Malicious code in tuhin1729 (npm)
- Jun 20, 2022
Malicious code in tdd-react-store-locator (npm)
- Jun 20, 2022
Malicious code in mdcs-pns (npm)
- Jun 20, 2022
Malicious code in invision-nodejs-test-utils (npm)
- Jun 20, 2022
Malicious code in calc_nll0q4swog (npm)
- Jun 20, 2022
Malware in mdcs-pns
1 compromised version
- Jun 20, 2022
Malware in tuhin1729
1 compromised version
- Jun 20, 2022
Malware in calc_nll0q4swog
1 compromised version
- Jun 20, 2022
Malware in invision-nodejs-test-utils
1 compromised version
- Jun 20, 2022
Malware in tdd-react-store-locator
1 compromised version
- Jun 20, 2022
Malicious code in se.hecate.visual-studio (npm)
- Jun 20, 2022
Malicious code in oopp (npm)
- Jun 20, 2022
Malicious code in kiota-serialization-json (npm)
- Jun 20, 2022
Malicious code in kiota-authentication-azure (npm)
- Jun 20, 2022
Malware in kiota-authentication-azure
1 compromised version
- Jun 20, 2022
Malware in oopp
1 compromised version
- Jun 20, 2022
Malware in se.hecate.visual-studio
1 compromised version
- Jun 20, 2022
Malware in kiota-serialization-json
1 compromised version
- Jun 20, 2022
Malicious code in test-free (npm)
- Jun 20, 2022
Malicious code in ravi-test (npm)
- Jun 20, 2022
Malicious code in pipelines-javascript (npm)
- Jun 20, 2022
Malware in pipelines-javascript
1 compromised version
- Jun 20, 2022
Malware in ravi-test
1 compromised version
- Jun 20, 2022
Malware in test-free
1 compromised version
- Jun 20, 2022
Malicious code in op121 (npm)
- Jun 20, 2022
Malicious code in calc_uu563lcq5d (npm)
- Jun 20, 2022
Malicious code in calc_cqbu4yluwj (npm)
- Jun 20, 2022
Malicious code in calc_a1zajwr9k7 (npm)
- Jun 20, 2022
Malicious code in berakss (npm)
- Jun 20, 2022
Malware in calc_a1zajwr9k7
1 compromised version
- Jun 20, 2022
Malware in berakss
1 compromised version
- Jun 20, 2022
Malware in calc_uu563lcq5d
1 compromised version
- Jun 20, 2022
Malware in calc_cqbu4yluwj
1 compromised version
- Jun 20, 2022
Malware in op121
1 compromised version
Page 7163 of 7,293