Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,674 total · sorted newest first- Jun 20, 2022
Malicious code in @xvideos/anonymizer (npm)
- Jun 20, 2022
Malicious code in @xvideos/analytics (npm)
- Jun 20, 2022
Malicious code in @xvideos/alerts (npm)
- Jun 20, 2022
Malware in @xvideos/anonymizer
1 compromised version
- Jun 20, 2022
Malware in @xvideos/api
1 compromised version
- Jun 20, 2022
Malware in @xvideos/analytics
1 compromised version
- Jun 20, 2022
Malware in @xvideos/alerts
1 compromised version
- Jun 20, 2022
Malicious code in @xvideos/auth-server (npm)
- Jun 20, 2022
Malicious code in @xvideos/auth (npm)
- Jun 20, 2022
Malicious code in @xvideos/apps (npm)
- Jun 20, 2022
Malicious code in @xvideos/app-config (npm)
- Jun 20, 2022
Malicious code in @xvideos/app (npm)
- Jun 20, 2022
Malware in @xvideos/app-config
1 compromised version
- Jun 20, 2022
Malware in @xvideos/auth
1 compromised version
- Jun 20, 2022
Malware in @xvideos/app
1 compromised version
- Jun 20, 2022
Malware in @xvideos/apps
1 compromised version
- Jun 20, 2022
Malware in @xvideos/auth-server
1 compromised version
- Jun 20, 2022
Malicious code in @xvideos/base (npm)
- Jun 20, 2022
Malicious code in @xvideos/backend (npm)
- Jun 20, 2022
Malicious code in @xvideos/azure (npm)
- Jun 20, 2022
Malicious code in @xvideos/aws (npm)
- Jun 20, 2022
Malware in @xvideos/azure
1 compromised version
- Jun 20, 2022
Malware in @xvideos/base
1 compromised version
- Jun 20, 2022
Malware in @xvideos/aws
1 compromised version
- Jun 20, 2022
Malware in @xvideos/backend
1 compromised version
- Jun 20, 2022
Malicious code in @xvideos/client-api (npm)
- Jun 20, 2022
Malicious code in @xvideos/client (npm)
- Jun 20, 2022
Malicious code in @xvideos/builder (npm)
- Jun 20, 2022
Malicious code in @xvideos/build (npm)
- Jun 20, 2022
Malware in @xvideos/client-api
1 compromised version
- Jun 20, 2022
Malware in @xvideos/client
1 compromised version
- Jun 20, 2022
Malware in @xvideos/builder
1 compromised version
- Jun 20, 2022
Malware in @xvideos/build
1 compromised version
- Jun 20, 2022
Malicious code in @xvideos/core-clients (npm)
- Jun 20, 2022
Malicious code in @xvideos/core (npm)
- Jun 20, 2022
Malicious code in @xvideos/common-api (npm)
- Jun 20, 2022
Malicious code in @xvideos/common (npm)
- Jun 20, 2022
Malware in @xvideos/core
1 compromised version
- Jun 20, 2022
Malware in @xvideos/common
1 compromised version
- Jun 20, 2022
Malware in @xvideos/common-api
1 compromised version
- Jun 20, 2022
Malware in @xvideos/core-clients
1 compromised version
- Jun 20, 2022
Malicious code in @xvideos/frontend (npm)
- Jun 20, 2022
Malicious code in @xvideos/facade-server (npm)
- Jun 20, 2022
Malicious code in @xvideos/facade (npm)
- Jun 20, 2022
Malicious code in @xvideos/default (npm)
- Jun 20, 2022
Malware in @xvideos/facade
1 compromised version
- Jun 20, 2022
Malware in @xvideos/default
1 compromised version
- Jun 20, 2022
Malware in @xvideos/facade-server
1 compromised version
- Jun 20, 2022
Malware in @xvideos/frontend
1 compromised version
- Jun 20, 2022
Malicious code in @xvideos/npm (npm)
Page 7178 of 7,294