Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,560 total · sorted newest first- Jun 20, 2022
Malicious code in inf-build-module-prefixer (npm)
- Jun 20, 2022
Malicious code in genesys-frontend-facade (npm)
- Jun 20, 2022
Malicious code in ent-unified-logon-template (npm)
- Jun 20, 2022
Malicious code in dds-client-side-logger (npm)
- Jun 20, 2022
Malware in inf-build-module-prefixer
1 compromised version
- Jun 20, 2022
Malware in ent-unified-logon-template
1 compromised version
- Jun 20, 2022
Malware in dds-client-side-logger
1 compromised version
- Jun 20, 2022
Malware in genesys-frontend-facade
1 compromised version
- Jun 20, 2022
Malicious code in mz-server (npm)
- Jun 20, 2022
Malicious code in lyte-dom (npm)
- Jun 20, 2022
Malicious code in letmeflyaadd (npm)
- Jun 20, 2022
Malicious code in lakki-lib (npm)
- Jun 20, 2022
Malware in letmeflyaadd
1 compromised version
- Jun 20, 2022
Malware in lyte-dom
1 compromised version
- Jun 20, 2022
Malware in mz-server
1 compromised version
- Jun 20, 2022
Malware in lakki-lib
1 compromised version
- Jun 20, 2022
Malicious code in ui-experiments (npm)
- Jun 20, 2022
Malicious code in opendatanetwork.com (npm)
- Jun 20, 2022
Malicious code in legendary-noodle (npm)
- Jun 20, 2022
Malicious code in discord-selfbot-tools (npm)
- Jun 20, 2022
Malware in ui-experiments
1 compromised version
- Jun 20, 2022
Malware in discord-selfbot-tools
1 compromised version
- Jun 20, 2022
Malware in opendatanetwork.com
1 compromised version
- Jun 20, 2022
Malware in legendary-noodle
1 compromised version
- Jun 20, 2022
Malicious code in tools-for-discord (npm)
- Jun 20, 2022
Malicious code in odn-backend (npm)
- Jun 20, 2022
Malicious code in kriswuqian (npm)
- Jun 20, 2022
Malicious code in dev.socrata.com (npm)
- Jun 20, 2022
Malware in odn-backend
1 compromised version
- Jun 20, 2022
Malware in tools-for-discord
1 compromised version
- Jun 20, 2022
Malware in dev.socrata.com
1 compromised version
- Jun 20, 2022
Malware in kriswuqian
1 compromised version
- Jun 20, 2022
Malicious code in twilio-video-diagnostics-react-app (npm)
- Jun 20, 2022
Malicious code in tlvfobkwlssmirkwrtta (npm)
- Jun 20, 2022
Malicious code in tableau-iframe (npm)
- Jun 20, 2022
Malicious code in syzzfpmkizkljkiibpgb (npm)
- Jun 20, 2022
Malware in twilio-video-diagnostics-react-app
1 compromised version
- Jun 20, 2022
Malware in syzzfpmkizkljkiibpgb
1 compromised version
- Jun 20, 2022
Malware in tlvfobkwlssmirkwrtta
1 compromised version
- Jun 20, 2022
Malware in tableau-iframe
1 compromised version
- Jun 20, 2022
Malicious code in twilio-video-app-react (npm)
- Jun 20, 2022
Malicious code in shubholic-test.json (npm)
- Jun 20, 2022
Malicious code in shubholic-test (npm)
- Jun 20, 2022
Malicious code in protractor-skeleton (npm)
- Jun 20, 2022
Malware in protractor-skeleton
1 compromised version
- Jun 20, 2022
Malware in shubholic-test.json
1 compromised version
- Jun 20, 2022
Malware in shubholic-test
1 compromised version
- Jun 20, 2022
Malware in twilio-video-app-react
1 compromised version
- Jun 20, 2022
Malicious code in vera.js (npm)
- Jun 20, 2022
Malicious code in twilio-voice-notification-app (npm)
Page 7225 of 7,292