Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,498 total · sorted newest first- Jun 20, 2022
Malicious code in fixer-adapter (npm)
- Jun 20, 2022
Malware in flightaware-adapter
1 compromised version
- Jun 20, 2022
Malware in fmpcloud-adapter
1 compromised version
- Jun 20, 2022
Malware in fixer-adapter
1 compromised version
- Jun 20, 2022
Malware in gauntlet-core
1 compromised version
- Jun 20, 2022
Malware in gauntlet-solana
1 compromised version
- Jun 20, 2022
Malicious code in finage-adapter (npm)
- Jun 20, 2022
Malicious code in expert-car-broker-adapter (npm)
- Jun 20, 2022
Malicious code in ethgaswatch-adapter (npm)
- Jun 20, 2022
Malware in finage-adapter
1 compromised version
- Jun 20, 2022
Malware in ethgaswatch-adapter
1 compromised version
- Jun 20, 2022
Malware in expert-car-broker-adapter
1 compromised version
- Jun 20, 2022
Malicious code in ethgasstation-adapter (npm)
- Jun 20, 2022
Malicious code in etherscan-adapter (npm)
- Jun 20, 2022
Malicious code in etherchain-adapter (npm)
- Jun 20, 2022
Malicious code in eth-balance-adapter (npm)
- Jun 20, 2022
Malicious code in eodhistoricaldata-adapter (npm)
- Jun 20, 2022
Malware in eth-balance-adapter
1 compromised version
- Jun 20, 2022
Malware in etherscan-adapter
1 compromised version
- Jun 20, 2022
Malware in eodhistoricaldata-adapter
1 compromised version
- Jun 20, 2022
Malware in etherchain-adapter
1 compromised version
- Jun 20, 2022
Malware in ethgasstation-adapter
1 compromised version
- Jun 20, 2022
Malicious code in enzyme-adapter (npm)
- Jun 20, 2022
Malicious code in ea-test-helpers (npm)
- Jun 20, 2022
Malicious code in ea-reference-data-reader (npm)
- Jun 20, 2022
Malicious code in ea-factories (npm)
- Jun 20, 2022
Malware in ea-reference-data-reader
1 compromised version
- Jun 20, 2022
Malware in ea-test-helpers
1 compromised version
- Jun 20, 2022
Malware in enzyme-adapter
1 compromised version
- Jun 20, 2022
Malware in ea-factories
1 compromised version
- Jun 20, 2022
Malicious code in dxfeed-secondary-adapter (npm)
- Jun 20, 2022
Malicious code in dxfeed-adapter (npm)
- Jun 20, 2022
Malicious code in dwolla-adapter (npm)
- Jun 20, 2022
Malicious code in durin-adapter (npm)
- Jun 20, 2022
Malware in dxfeed-secondary-adapter
1 compromised version
- Jun 20, 2022
Malware in dxfeed-adapter
1 compromised version
- Jun 20, 2022
Malware in durin-adapter
1 compromised version
- Jun 20, 2022
Malware in dwolla-adapter
1 compromised version
- Jun 20, 2022
Malicious code in dns-query-adapter (npm)
- Jun 20, 2022
Malicious code in deribit-adapter (npm)
- Jun 20, 2022
Malicious code in curve-adapter (npm)
- Jun 20, 2022
Malicious code in currencylayer-adapter (npm)
- Jun 20, 2022
Malware in dns-query-adapter
1 compromised version
- Jun 20, 2022
Malware in curve-adapter
1 compromised version
- Jun 20, 2022
Malware in deribit-adapter
1 compromised version
- Jun 20, 2022
Malware in currencylayer-adapter
1 compromised version
- Jun 20, 2022
Malicious code in cryptomkt-adapter (npm)
- Jun 20, 2022
Malicious code in cryptoid-adapter (npm)
- Jun 20, 2022
Malicious code in cryptocompare-adapter (npm)
- Jun 20, 2022
Malicious code in cryptoapis-v2-adapter (npm)
Page 7232 of 7,290