Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,429 total · sorted newest first- Jun 10, 2022
Malware in testte
1 compromised version
- Jun 10, 2022
Malware in vpc-stack-with-issues
1 compromised version
- Jun 10, 2022
Malicious code in ferris-design-tokens (npm)
- Jun 10, 2022
Malware in ferris-design-tokens
1 compromised version
- Jun 10, 2022
Malicious code in colorss-v11 (npm)
- Jun 10, 2022
Malware in colorss-v11
1 compromised version
- Jun 9, 2022
Malicious code in @manomano-toolbox/async-exports (npm)
- Jun 9, 2022
Malware in @manomano-toolbox/async-exports
1 compromised version
- Jun 9, 2022
Malicious code in @manomano-toolbox/commercial-operations (npm)
- Jun 9, 2022
Malware in @manomano-toolbox/commercial-operations
1 compromised version
- Jun 9, 2022
Malicious code in @manomano-toolbox/components (npm)
- Jun 9, 2022
Malware in @manomano-toolbox/components
1 compromised version
- Jun 9, 2022
Malicious code in @spinak/iac-lib (npm)
- Jun 9, 2022
Malicious code in @manomano-toolbox/catalog (npm)
- Jun 9, 2022
Malicious code in @manomano-toolbox/api-gateway (npm)
- Jun 9, 2022
Malware in @spinak/iac-lib
1 compromised version
- Jun 9, 2022
Malware in @manomano-toolbox/catalog
1 compromised version
- Jun 9, 2022
Malware in @manomano-toolbox/api-gateway
1 compromised version
- Jun 9, 2022
Malicious code in @spinak/iac (npm)
- Jun 9, 2022
Malicious code in @manomano-toolbox/toolkit (npm)
- Jun 9, 2022
Malicious code in @manomano-toolbox/pim-management (npm)
- Jun 9, 2022
Malicious code in @manomano-toolbox/hub (npm)
- Jun 9, 2022
Malware in @manomano-toolbox/hub
1 compromised version
- Jun 9, 2022
Malware in @manomano-toolbox/toolkit
1 compromised version
- Jun 9, 2022
Malware in @spinak/iac
1 compromised version
- Jun 9, 2022
Malware in @manomano-toolbox/pim-management
1 compromised version
- Jun 9, 2022
Malicious code in @tide-web-apps/bert2 (npm)
- Jun 9, 2022
Malware in @tide-web-apps/bert2
1 compromised version
- Jun 9, 2022
Malicious code in zzzhelloeveryone (npm)
- Jun 9, 2022
Malicious code in thisisveryfistpackage11 (npm)
- Jun 9, 2022
Malicious code in reqsender321 (npm)
- Jun 9, 2022
Malicious code in newtestforme1008 (npm)
- Jun 9, 2022
Malicious code in newtestforme1007 (npm)
- Jun 9, 2022
Malicious code in anotherpackagefor101 (npm)
- Jun 9, 2022
Malware in zzzhelloeveryone
1 compromised version
- Jun 9, 2022
Malware in anotherpackagefor101
1 compromised version
- Jun 9, 2022
Malware in newtestforme1008
1 compromised version
- Jun 9, 2022
Malware in reqsender321
1 compromised version
- Jun 9, 2022
Malware in thisisveryfistpackage11
1 compromised version
- Jun 9, 2022
Malware in newtestforme1007
1 compromised version
- Jun 9, 2022
Malicious code in calc_testing (npm)
- Jun 9, 2022
Malicious code in bebekair (npm)
- Jun 9, 2022
Malware in calc_testing
1 compromised version
- Jun 9, 2022
Malware in bebekair
1 compromised version
- Jun 8, 2022
Malicious code in on-running-script-context (npm)
- Jun 8, 2022
Malware in on-running-script-context
1 compromised version
- Jun 8, 2022
Malicious code in angieslist-visitor-app-common (npm)
- Jun 8, 2022
Malware in angieslist-visitor-app-common
1 compromised version
- Jun 8, 2022
Malicious code in ai-aws-manager (npm)
- Jun 8, 2022
Malicious code in zrc2-wallet-zilliqa (npm)
Page 7276 of 7,289