Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,425 total · sorted newest first- Jun 20, 2022
Malicious code in sfdc-aem-master (npm)
- Jun 20, 2022
Malicious code in lwc-modules-bar (npm)
- Jun 20, 2022
Malicious code in eslint-config-cq-screens (npm)
- Jun 20, 2022
Malicious code in apl-html (npm)
- Jun 20, 2022
Malware in apl-html
1 compromised version
- Jun 20, 2022
Malware in sfdc-aem-master
1 compromised version
- Jun 20, 2022
Malware in eslint-config-cq-screens
1 compromised version
- Jun 20, 2022
Malware in lwc-modules-bar
1 compromised version
- Jun 20, 2022
Malware in sfdc-lightning
1 compromised version
- Jun 20, 2022
Malicious code in ui-sfdc-javascript-impl (npm)
- Jun 20, 2022
Malicious code in sfdc-stream (npm)
- Jun 20, 2022
Malicious code in sfdc-console (npm)
- Jun 20, 2022
Malware in ui-sfdc-javascript-impl
1 compromised version
- Jun 20, 2022
Malware in sfdc-console
1 compromised version
- Jun 20, 2022
Malware in sfdc-stream
1 compromised version
- Jun 20, 2022
Malicious code in sfdc-title-utils (npm)
- Jun 20, 2022
Malicious code in sfdc-empty-chart (npm)
- Jun 20, 2022
Malicious code in sfdc-abstract-plot (npm)
- Jun 20, 2022
Malicious code in sfdc-abstract-chart (npm)
- Jun 20, 2022
Malware in sfdc-empty-chart
1 compromised version
- Jun 20, 2022
Malware in sfdc-abstract-chart
1 compromised version
- Jun 20, 2022
Malware in sfdc-title-utils
1 compromised version
- Jun 20, 2022
Malware in sfdc-abstract-plot
1 compromised version
- Jun 20, 2022
Malicious code in sfdc-scatter-chart (npm)
- Jun 20, 2022
Malicious code in sfdc-metric-chart (npm)
- Jun 20, 2022
Malicious code in sfdc-bar-chart (npm)
- Jun 20, 2022
Malicious code in sfdc-abstract-cartesian-chart (npm)
- Jun 20, 2022
Malware in sfdc-bar-chart
1 compromised version
- Jun 20, 2022
Malware in sfdc-metric-chart
1 compromised version
- Jun 20, 2022
Malware in sfdc-scatter-chart
1 compromised version
- Jun 20, 2022
Malware in sfdc-abstract-cartesian-chart
1 compromised version
- Jun 20, 2022
Malicious code in sfdc-line-chart (npm)
- Jun 20, 2022
Malicious code in sfdc-gauge-chart (npm)
- Jun 20, 2022
Malicious code in sfdc-funnel-chart (npm)
- Jun 20, 2022
Malicious code in sfdc-combo-chart (npm)
- Jun 20, 2022
Malware in sfdc-funnel-chart
1 compromised version
- Jun 20, 2022
Malware in sfdc-line-chart
1 compromised version
- Jun 20, 2022
Malware in sfdc-gauge-chart
1 compromised version
- Jun 20, 2022
Malware in sfdc-combo-chart
1 compromised version
- Jun 20, 2022
Malicious code in sfdc-title-util (npm)
- Jun 20, 2022
Malicious code in react-dnd-examples-hooks (npm)
- Jun 20, 2022
Malicious code in react-dnd-examples-decorators (npm)
- Jun 20, 2022
Malicious code in com.unity.git (npm)
- Jun 20, 2022
Malware in sfdc-title-util
1 compromised version
- Jun 20, 2022
Malware in com.unity.git
1 compromised version
- Jun 20, 2022
Malware in react-dnd-examples-hooks
1 compromised version
- Jun 20, 2022
Malware in react-dnd-examples-decorators
1 compromised version
- Jun 20, 2022
Malicious code in registrydependency1 (npm)
- Jun 20, 2022
Malicious code in com.unity.git.ui.tests (npm)
- Jun 20, 2022
Malicious code in com.unity.git.ui (npm)
Page 7207 of 7,289