Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,677 total · sorted newest first- Jun 20, 2022
Malware in ac-base
1 compromised version
- Jun 20, 2022
Malware in fuckfuckapk
1 compromised version
- Jun 20, 2022
Malware in ccxp
1 compromised version
- Jun 20, 2022
Malware in ac-event-emitter
1 compromised version
- Jun 20, 2022
Malicious code in ac-deferred (npm)
- Jun 20, 2022
Malicious code in ac-animation-sequencer (npm)
- Jun 20, 2022
Malicious code in uxpin-merge-ms-fabric (npm)
- Jun 20, 2022
Malicious code in rror.stack (npm)
- Jun 20, 2022
Malicious code in cloudshell-session (npm)
- Jun 20, 2022
Malware in uxpin-merge-ms-fabric
1 compromised version
- Jun 20, 2022
Malware in cloudshell-session
1 compromised version
- Jun 20, 2022
Malware in rror.stack
1 compromised version
- Jun 20, 2022
Malware in ac-animation-sequencer
1 compromised version
- Jun 20, 2022
Malware in ac-deferred
1 compromised version
- Jun 20, 2022
Malicious code in usaa-oauth (npm)
- Jun 20, 2022
Malicious code in snackbars (npm)
- Jun 20, 2022
Malicious code in load-image-exif (npm)
- Jun 20, 2022
Malicious code in idcs-page-header (npm)
- Jun 20, 2022
Malware in idcs-page-header
1 compromised version
- Jun 20, 2022
Malware in load-image-exif
1 compromised version
- Jun 20, 2022
Malware in usaa-oauth
1 compromised version
- Jun 20, 2022
Malware in snackbars
1 compromised version
- Jun 20, 2022
Malicious code in @audi-cct/teaser-feature-app (npm)
- Jun 20, 2022
Malicious code in zmarta-analytics (npm)
- Jun 20, 2022
Malicious code in toosting (npm)
- Jun 20, 2022
Malicious code in prettier-linter-helper (npm)
- Jun 20, 2022
Malware in prettier-linter-helper
1 compromised version
- Jun 20, 2022
Malware in toosting
1 compromised version
- Jun 20, 2022
Malware in zmarta-analytics
1 compromised version
- Jun 20, 2022
Malware in @audi-cct/teaser-feature-app
1 compromised version
- Jun 20, 2022
Malicious code in zmarta (npm)
- Jun 20, 2022
Malicious code in trusona (npm)
- Jun 20, 2022
Malicious code in opbox-web-browser (npm)
- Jun 20, 2022
Malicious code in noblox.js-promises (npm)
- Jun 20, 2022
Malware in noblox.js-promises
1 compromised version
- Jun 20, 2022
Malware in trusona
1 compromised version
- Jun 20, 2022
Malware in zmarta
1 compromised version
- Jun 20, 2022
Malware in opbox-web-browser
1 compromised version
- Jun 20, 2022
Malicious code in sketch-multi-lingual-plugin (npm)
- Jun 20, 2022
Malicious code in sbb-esta (npm)
- Jun 20, 2022
Malicious code in sbb-angular (npm)
- Jun 20, 2022
Malicious code in pictogrameditor (npm)
- Jun 20, 2022
Malware in sbb-angular
1 compromised version
- Jun 20, 2022
Malware in sketch-multi-lingual-plugin
1 compromised version
- Jun 20, 2022
Malware in pictogrameditor
1 compromised version
- Jun 20, 2022
Malware in sbb-esta
1 compromised version
- Jun 20, 2022
Malicious code in prop-validators (npm)
- Jun 20, 2022
Malicious code in mrg-nano-xhr (npm)
- Jun 20, 2022
Malicious code in looloo (npm)
- Jun 20, 2022
Malicious code in comments2 (npm)
Page 7171 of 7,294