Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Jun 20, 2022
Malicious code in perf-storage-blob (npm)
- Jun 20, 2022
Malicious code in perf-monitor-query (npm)
- Jun 20, 2022
Malware in perf-storage-blob
1 compromised version
- Jun 20, 2022
Malware in perf-monitor-query
1 compromised version
- Jun 20, 2022
Malware in perf-storage-file-share
1 compromised version
- Jun 20, 2022
Malware in perf-storage-file-datalake
1 compromised version
- Jun 20, 2022
Malicious code in ai-text-analytics (npm)
- Jun 20, 2022
Malicious code in ai-form-recognizer (npm)
- Jun 20, 2022
Malicious code in keyvault-secrets (npm)
- Jun 20, 2022
Malicious code in keyvault-certificates (npm)
- Jun 20, 2022
Malware in keyvault-certificates
1 compromised version
- Jun 20, 2022
Malware in keyvault-secrets
1 compromised version
- Jun 20, 2022
Malware in ai-text-analytics
1 compromised version
- Jun 20, 2022
Malware in ai-form-recognizer
1 compromised version
- Jun 20, 2022
Malicious code in ai-metrics-advisor (npm)
- Jun 20, 2022
Malicious code in service-bus-track-1 (npm)
- Jun 20, 2022
Malicious code in eventgrid (npm)
- Jun 20, 2022
Malicious code in container-registry (npm)
- Jun 20, 2022
Malware in eventgrid
1 compromised version
- Jun 20, 2022
Malware in ai-metrics-advisor
1 compromised version
- Jun 20, 2022
Malware in container-registry
1 compromised version
- Jun 20, 2022
Malware in service-bus-track-1
1 compromised version
- Jun 20, 2022
Malicious code in storage-file-share-track-1 (npm)
- Jun 20, 2022
Malicious code in storage-blob-track-1 (npm)
- Jun 20, 2022
Malicious code in search-documents (npm)
- Jun 20, 2022
Malicious code in event-hubs-track-1 (npm)
- Jun 20, 2022
Malicious code in event-hubs (npm)
- Jun 20, 2022
Malware in storage-blob-track-1
1 compromised version
- Jun 20, 2022
Malware in storage-file-share-track-1
1 compromised version
- Jun 20, 2022
Malware in event-hubs
1 compromised version
- Jun 20, 2022
Malware in search-documents
1 compromised version
- Jun 20, 2022
Malware in event-hubs-track-1
1 compromised version
- Jun 20, 2022
Malicious code in web-workers-js (npm)
- Jun 20, 2022
Malicious code in storage-file-datalake (npm)
- Jun 20, 2022
Malicious code in monitor-query (npm)
- Jun 20, 2022
Malware in storage-file-datalake
1 compromised version
- Jun 20, 2022
Malware in web-workers-js
1 compromised version
- Jun 20, 2022
Malware in monitor-query
1 compromised version
- Jun 20, 2022
Malicious code in web-workers-ts (npm)
- Jun 20, 2022
Malicious code in storage-internal-avro (npm)
- Jun 20, 2022
Malicious code in keyvault-common (npm)
- Jun 20, 2022
Malicious code in cors-typescript (npm)
- Jun 20, 2022
Malware in storage-internal-avro
1 compromised version
- Jun 20, 2022
Malware in cors-typescript
1 compromised version
- Jun 20, 2022
Malware in web-workers-ts
1 compromised version
- Jun 20, 2022
Malware in keyvault-common
1 compromised version
- Jun 20, 2022
Malicious code in vtstock (npm)
- Jun 20, 2022
Malicious code in @hrsites/fb-with-city-suggests (npm)
- Jun 20, 2022
Malicious code in com.unity.xr.windowsmr (npm)
- Jun 20, 2022
Malicious code in com.unity.barracuda (npm)
Page 7195 of 7,293