Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,683 total · sorted newest first- Jun 20, 2022
Malicious code in pipelines-javascript (npm)
- Jun 20, 2022
Malware in pipelines-javascript
1 compromised version
- Jun 20, 2022
Malware in ravi-test
1 compromised version
- Jun 20, 2022
Malware in test-free
1 compromised version
- Jun 20, 2022
Malicious code in op121 (npm)
- Jun 20, 2022
Malicious code in calc_uu563lcq5d (npm)
- Jun 20, 2022
Malicious code in calc_cqbu4yluwj (npm)
- Jun 20, 2022
Malicious code in calc_a1zajwr9k7 (npm)
- Jun 20, 2022
Malicious code in berakss (npm)
- Jun 20, 2022
Malware in calc_a1zajwr9k7
1 compromised version
- Jun 20, 2022
Malware in berakss
1 compromised version
- Jun 20, 2022
Malware in calc_uu563lcq5d
1 compromised version
- Jun 20, 2022
Malware in calc_cqbu4yluwj
1 compromised version
- Jun 20, 2022
Malware in op121
1 compromised version
- Jun 20, 2022
Malicious code in calc_zhbuzptw45 (npm)
- Jun 20, 2022
Malicious code in calc_x0wguvucl1 (npm)
- Jun 20, 2022
Malicious code in calc_n5551j7gbr (npm)
- Jun 20, 2022
Malicious code in calc_gcc1y6tzao (npm)
- Jun 20, 2022
Malware in calc_n5551j7gbr
1 compromised version
- Jun 20, 2022
Malware in calc_gcc1y6tzao
1 compromised version
- Jun 20, 2022
Malware in calc_x0wguvucl1
1 compromised version
- Jun 20, 2022
Malware in calc_zhbuzptw45
1 compromised version
- Jun 20, 2022
Malicious code in calc_tag3iqjm3x (npm)
- Jun 20, 2022
Malicious code in calc_ie98wra5sn (npm)
- Jun 20, 2022
Malicious code in calc_265o5cvxxt (npm)
- Jun 20, 2022
Malicious code in calc_0ea1axyay6 (npm)
- Jun 20, 2022
Malware in calc_ie98wra5sn
1 compromised version
- Jun 20, 2022
Malware in calc_265o5cvxxt
1 compromised version
- Jun 20, 2022
Malware in calc_0ea1axyay6
1 compromised version
- Jun 20, 2022
Malware in calc_tag3iqjm3x
1 compromised version
- Jun 20, 2022
Malicious code in calc_r1wpdjwe0y (npm)
- Jun 20, 2022
Malicious code in calc_gl2xiahl1g (npm)
- Jun 20, 2022
Malicious code in calc_ad57vduuf3 (npm)
- Jun 20, 2022
Malicious code in calc_2lxgcr990p (npm)
- Jun 20, 2022
Malware in calc_r1wpdjwe0y
1 compromised version
- Jun 20, 2022
Malware in calc_2lxgcr990p
1 compromised version
- Jun 20, 2022
Malware in calc_gl2xiahl1g
1 compromised version
- Jun 20, 2022
Malware in calc_ad57vduuf3
1 compromised version
- Jun 20, 2022
Malicious code in vue-loader-3 (npm)
- Jun 20, 2022
Malicious code in mrg-xray (npm)
- Jun 20, 2022
Malicious code in dogwhohacks-npm-poc (npm)
- Jun 20, 2022
Malicious code in calc_zd4nl10t96 (npm)
- Jun 20, 2022
Malware in vue-loader-3
1 compromised version
- Jun 20, 2022
Malware in calc_zd4nl10t96
1 compromised version
- Jun 20, 2022
Malware in dogwhohacks-npm-poc
1 compromised version
- Jun 20, 2022
Malware in mrg-xray
1 compromised version
- Jun 20, 2022
Malicious code in tigerpochere6 (npm)
- Jun 20, 2022
Malicious code in testexploit1 (npm)
- Jun 20, 2022
Malicious code in testexploit (npm)
- Jun 20, 2022
Malicious code in solc-0.7.6 (npm)
Page 7165 of 7,294