Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,498 total · sorted newest first- Jun 20, 2022
Malicious code in mycryptoapi-adapter (npm)
- Jun 20, 2022
Malicious code in mock-ea-adapter (npm)
- Jun 20, 2022
Malicious code in metalsapi-adapter (npm)
- Jun 20, 2022
Malicious code in messari-adapter (npm)
- Jun 20, 2022
Malware in messari-adapter
1 compromised version
- Jun 20, 2022
Malware in mycryptoapi-adapter
1 compromised version
- Jun 20, 2022
Malware in metalsapi-adapter
1 compromised version
- Jun 20, 2022
Malware in mock-ea-adapter
1 compromised version
- Jun 20, 2022
Malicious code in marketstack-adapter (npm)
- Jun 20, 2022
Malicious code in lotus-adapter (npm)
- Jun 20, 2022
Malicious code in lition-adapter (npm)
- Jun 20, 2022
Malicious code in linkpool-adapter (npm)
- Jun 20, 2022
Malware in lition-adapter
1 compromised version
- Jun 20, 2022
Malware in linkpool-adapter
1 compromised version
- Jun 20, 2022
Malware in marketstack-adapter
1 compromised version
- Jun 20, 2022
Malware in lotus-adapter
1 compromised version
- Jun 20, 2022
Malicious code in lcx-adapter (npm)
- Jun 20, 2022
Malicious code in layer2-sequencer-health-adapter (npm)
- Jun 20, 2022
Malicious code in kaiko-adapter (npm)
- Jun 20, 2022
Malware in layer2-sequencer-health-adapter
1 compromised version
- Jun 20, 2022
Malware in lcx-adapter
1 compromised version
- Jun 20, 2022
Malware in kaiko-adapter
1 compromised version
- Jun 20, 2022
Malicious code in json-rpc-adapter (npm)
- Jun 20, 2022
Malicious code in jpegd-adapter (npm)
- Jun 20, 2022
Malicious code in ipfs-adapter (npm)
- Jun 20, 2022
Malicious code in intrinio-adapter (npm)
- Jun 20, 2022
Malware in jpegd-adapter
1 compromised version
- Jun 20, 2022
Malware in intrinio-adapter
1 compromised version
- Jun 20, 2022
Malware in json-rpc-adapter
1 compromised version
- Jun 20, 2022
Malware in ipfs-adapter
1 compromised version
- Jun 20, 2022
Malicious code in iex-cloud-adapter (npm)
- Jun 20, 2022
Malicious code in gramchain-adapter (npm)
- Jun 20, 2022
Malicious code in google-bigquery-adapter (npm)
- Jun 20, 2022
Malicious code in geodb-adapter (npm)
- Jun 20, 2022
Malware in geodb-adapter
1 compromised version
- Jun 20, 2022
Malware in gramchain-adapter
1 compromised version
- Jun 20, 2022
Malware in iex-cloud-adapter
1 compromised version
- Jun 20, 2022
Malware in google-bigquery-adapter
1 compromised version
- Jun 20, 2022
Malicious code in genesis-volatility-adapter (npm)
- Jun 20, 2022
Malicious code in gemini-adapter (npm)
- Jun 20, 2022
Malicious code in gauntlet-terra (npm)
- Jun 20, 2022
Malicious code in gauntlet-solana-contracts (npm)
- Jun 20, 2022
Malware in gauntlet-terra
1 compromised version
- Jun 20, 2022
Malware in genesis-volatility-adapter
1 compromised version
- Jun 20, 2022
Malware in gemini-adapter
1 compromised version
- Jun 20, 2022
Malware in gauntlet-solana-contracts
1 compromised version
- Jun 20, 2022
Malicious code in gauntlet-solana (npm)
- Jun 20, 2022
Malicious code in gauntlet-core (npm)
- Jun 20, 2022
Malicious code in fmpcloud-adapter (npm)
- Jun 20, 2022
Malicious code in flightaware-adapter (npm)
Page 7231 of 7,290