Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,677 total · sorted newest first- Jun 20, 2022
Malicious code in hdproxy-w3 (npm)
- Jun 20, 2022
Malicious code in grunt-agnitas (npm)
- Jun 20, 2022
Malicious code in gen-ts-googleapis (npm)
- Jun 20, 2022
Malware in p2p-amount-field
1 compromised version
- Jun 20, 2022
Malware in grunt-agnitas
1 compromised version
- Jun 20, 2022
Malware in gen-ts-googleapis
1 compromised version
- Jun 20, 2022
Malware in its_for_testing
1 compromised version
- Jun 20, 2022
Malware in hdproxy-w3
1 compromised version
- Jun 20, 2022
Malicious code in soheb (npm)
- Jun 20, 2022
Malicious code in @sugoma/amogus (npm)
- Jun 20, 2022
Malicious code in cookie-banner-vue (npm)
- Jun 20, 2022
Malware in soheb
1 compromised version
- Jun 20, 2022
Malware in @sugoma/amogus
1 compromised version
- Jun 20, 2022
Malware in cookie-banner-vue
1 compromised version
- Jun 20, 2022
Malicious code in @adamharrison/ecff60e3-0f15-4e57-a7b6-64e116738df3 (npm)
- Jun 20, 2022
Malicious code in @ljon/meterpreter-backdoor (npm)
- Jun 20, 2022
Malicious code in discordjs-selfv11 (npm)
- Jun 20, 2022
Malicious code in dade-murphys-package (npm)
- Jun 20, 2022
Malicious code in ciding_nfc (npm)
- Jun 20, 2022
Malware in dade-murphys-package
1 compromised version
- Jun 20, 2022
Malware in @adamharrison/ecff60e3-0f15-4e57-a7b6-64e116738df3
1 compromised version
- Jun 20, 2022
Malware in ciding_nfc
1 compromised version
- Jun 20, 2022
Malware in discordjs-selfv11
1 compromised version
- Jun 20, 2022
Malware in @ljon/meterpreter-backdoor
1 compromised version
- Jun 20, 2022
Malicious code in odinl0j01 (npm)
- Jun 20, 2022
Malicious code in formsg (npm)
- Jun 20, 2022
Malicious code in compositionend (npm)
- Jun 20, 2022
Malware in formsg
1 compromised version
- Jun 20, 2022
Malware in odinl0j01
1 compromised version
- Jun 20, 2022
Malware in compositionend
1 compromised version
- Jun 20, 2022
Malicious code in ofjaaahtwitch (npm)
- Jun 20, 2022
Malicious code in mostly-harmless (npm)
- Jun 20, 2022
Malicious code in hmatata (npm)
- Jun 20, 2022
Malicious code in big-towel (npm)
- Jun 20, 2022
Malware in mostly-harmless
1 compromised version
- Jun 20, 2022
Malware in big-towel
1 compromised version
- Jun 20, 2022
Malware in ofjaaahtwitch
1 compromised version
- Jun 20, 2022
Malware in hmatata
1 compromised version
- Jun 20, 2022
Malicious code in testerpen87 (npm)
- Jun 20, 2022
Malicious code in scalable-form-sd (npm)
- Jun 20, 2022
Malicious code in ofjaaahteste2 (npm)
- Jun 20, 2022
Malicious code in ofjaaahteste (npm)
- Jun 20, 2022
Malicious code in ofjaaah (npm)
- Jun 20, 2022
Malicious code in @eda.yandex/web-router (npm)
- Jun 20, 2022
Malware in @eda.yandex/web-router
1 compromised version
- Jun 20, 2022
Malware in ofjaaah
1 compromised version
- Jun 20, 2022
Malware in ofjaaahteste
1 compromised version
- Jun 20, 2022
Malware in testerpen87
1 compromised version
- Jun 20, 2022
Malware in scalable-form-sd
1 compromised version
- Jun 20, 2022
Malware in ofjaaahteste2
1 compromised version
Page 7169 of 7,294