Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,429 total · sorted newest first- Jun 20, 2022
Malicious code in azure-arm-support-samples-js (npm)
- Jun 20, 2022
Malicious code in azure-arm-storsimple8000series-samples-js (npm)
- Jun 20, 2022
Malicious code in azure-ai-document-translator-samples-ts (npm)
- Jun 20, 2022
Malware in azure-ai-document-translator-samples-ts
1 compromised version
- Jun 20, 2022
Malware in azure-arm-support-samples-js
1 compromised version
- Jun 20, 2022
Malware in azure-arm-storsimple8000series-samples-js
1 compromised version
- Jun 20, 2022
Malware in azure-communication-phone-numbers-samples-js
1 compromised version
- Jun 20, 2022
Malicious code in azure-arm-storagesync-samples-js (npm)
- Jun 20, 2022
Malicious code in azure-arm-resourcemover-samples-js (npm)
- Jun 20, 2022
Malicious code in azure-arm-resourcegraph-samples-ts-beta (npm)
- Jun 20, 2022
Malicious code in azure-arm-resourcegraph-samples-js-beta (npm)
- Jun 20, 2022
Malware in azure-arm-resourcemover-samples-js
1 compromised version
- Jun 20, 2022
Malware in azure-arm-storagesync-samples-js
1 compromised version
- Jun 20, 2022
Malware in azure-arm-resourcegraph-samples-ts-beta
1 compromised version
- Jun 20, 2022
Malware in azure-arm-resourcegraph-samples-js-beta
1 compromised version
- Jun 20, 2022
Malicious code in meliuz-card-google (npm)
- Jun 20, 2022
Malicious code in azure-arm-resourcemover-samples-ts (npm)
- Jun 20, 2022
Malicious code in azure-arm-privatedns-samples-ts (npm)
- Jun 20, 2022
Malicious code in azure-arm-privatedns-samples-js (npm)
- Jun 20, 2022
Malware in meliuz-card-google
1 compromised version
- Jun 20, 2022
Malware in azure-arm-resourcemover-samples-ts
1 compromised version
- Jun 20, 2022
Malware in azure-arm-privatedns-samples-ts
1 compromised version
- Jun 20, 2022
Malware in azure-arm-privatedns-samples-js
1 compromised version
- Jun 20, 2022
Malicious code in voicemail-prompt (npm)
- Jun 20, 2022
Malicious code in softomate-caa-module (npm)
- Jun 20, 2022
Malicious code in lib-feature-flags-js (npm)
- Jun 20, 2022
Malicious code in dx-osc-ui (npm)
- Jun 20, 2022
Malicious code in automated-end-to-end-tests (npm)
- Jun 20, 2022
Malware in dx-osc-ui
1 compromised version
- Jun 20, 2022
Malware in automated-end-to-end-tests
1 compromised version
- Jun 20, 2022
Malware in lib-feature-flags-js
1 compromised version
- Jun 20, 2022
Malware in voicemail-prompt
1 compromised version
- Jun 20, 2022
Malware in softomate-caa-module
1 compromised version
- Jun 20, 2022
Malicious code in voicemail-notify (npm)
- Jun 20, 2022
Malicious code in voicemail-main-fsm (npm)
- Jun 20, 2022
Malicious code in voicemail-mailbox (npm)
- Jun 20, 2022
Malware in voicemail-notify
1 compromised version
- Jun 20, 2022
Malware in voicemail-mailbox
1 compromised version
- Jun 20, 2022
Malware in voicemail-main-fsm
1 compromised version
- Jun 20, 2022
Malicious code in voicemail-logging (npm)
- Jun 20, 2022
Malicious code in voicemail-fsm (npm)
- Jun 20, 2022
Malicious code in voicemail-data (npm)
- Jun 20, 2022
Malicious code in voicemail-config (npm)
- Jun 20, 2022
Malicious code in voicemail-auth (npm)
- Jun 20, 2022
Malware in voicemail-config
1 compromised version
- Jun 20, 2022
Malware in voicemail-fsm
1 compromised version
- Jun 20, 2022
Malware in voicemail-auth
1 compromised version
- Jun 20, 2022
Malware in voicemail-logging
1 compromised version
- Jun 20, 2022
Malware in voicemail-data
1 compromised version
- Jun 20, 2022
Malicious code in url-parser-native (npm)
Page 7245 of 7,289