Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,541 total · sorted newest first- Jun 20, 2022
Malware in exoduscore
1 compromised version
- Jun 20, 2022
Malware in ketcher
1 compromised version
- Jun 20, 2022
Malware in ups_node
1 compromised version
- Jun 20, 2022
Malicious code in yandex-money-currency-info (npm)
- Jun 20, 2022
Malicious code in yamoney-react-components (npm)
- Jun 20, 2022
Malicious code in yamoney-frontend-lib (npm)
- Jun 20, 2022
Malicious code in @btu-tools/mfe-feature-toggles (npm)
- Jun 20, 2022
Malware in yamoney-react-components
1 compromised version
- Jun 20, 2022
Malware in yamoney-frontend-lib
1 compromised version
- Jun 20, 2022
Malware in @btu-tools/mfe-feature-toggles
1 compromised version
- Jun 20, 2022
Malware in yandex-money-currency-info
1 compromised version
- Jun 20, 2022
Malicious code in @remove-bg/exif-js (npm)
- Jun 20, 2022
Malicious code in @btu-tools/master-builder-client (npm)
- Jun 20, 2022
Malicious code in atestofwhatmighthappenifwetypo (npm)
- Jun 20, 2022
Malware in @remove-bg/exif-js
1 compromised version
- Jun 20, 2022
Malware in @btu-tools/master-builder-client
1 compromised version
- Jun 20, 2022
Malware in atestofwhatmighthappenifwetypo
1 compromised version
- Jun 20, 2022
Malicious code in alicloud-core (npm)
- Jun 20, 2022
Malicious code in alicloud-base (npm)
- Jun 20, 2022
Malicious code in wechat-internal (npm)
- Jun 20, 2022
Malicious code in feishu-web-login (npm)
- Jun 20, 2022
Malicious code in feishu-qrcode-login (npm)
- Jun 20, 2022
Malware in feishu-qrcode-login
1 compromised version
- Jun 20, 2022
Malware in alicloud-base
1 compromised version
- Jun 20, 2022
Malware in feishu-web-login
1 compromised version
- Jun 20, 2022
Malware in alicloud-core
1 compromised version
- Jun 20, 2022
Malware in wechat-internal
1 compromised version
- Jun 20, 2022
Malicious code in alicloud-common (npm)
- Jun 20, 2022
Malware in alicloud-common
1 compromised version
- Jun 20, 2022
Malicious code in wechat-service (npm)
- Jun 20, 2022
Malicious code in wechat-base (npm)
- Jun 20, 2022
Malicious code in feishu-js-jdk (npm)
- Jun 20, 2022
Malware in wechat-base
1 compromised version
- Jun 20, 2022
Malware in wechat-service
1 compromised version
- Jun 20, 2022
Malware in feishu-js-jdk
1 compromised version
- Jun 20, 2022
Malicious code in wechat-user (npm)
- Jun 20, 2022
Malicious code in meituan-js-jdk (npm)
- Jun 20, 2022
Malicious code in douyin-js-jdk (npm)
- Jun 20, 2022
Malicious code in bytedance-js-jdk (npm)
- Jun 20, 2022
Malware in meituan-js-jdk
1 compromised version
- Jun 20, 2022
Malware in douyin-js-jdk
1 compromised version
- Jun 20, 2022
Malware in wechat-user
1 compromised version
- Jun 20, 2022
Malware in bytedance-js-jdk
1 compromised version
- Jun 20, 2022
Malicious code in alipay-js-jdk (npm)
- Jun 20, 2022
Malicious code in wechat-web-login (npm)
- Jun 20, 2022
Malicious code in qq-web-login (npm)
- Jun 20, 2022
Malicious code in qq-qrcode-login (npm)
- Jun 20, 2022
Malicious code in huawei-js-sdk (npm)
- Jun 20, 2022
Malware in alipay-js-jdk
1 compromised version
- Jun 20, 2022
Malware in qq-qrcode-login
1 compromised version
Page 7228 of 7,291