Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- May 4, 2026
Malicious code in @google-pay-trust/init-google-pay-result (npm)
3 compromised versions
- May 4, 2026
Malicious code in @b2b_blocker/hide_activation_error (npm)
3 compromised versions
- May 4, 2026
Malicious code in @apple-pay-trust/destroy (npm)
4 compromised versions
- May 4, 2026
Malicious code in @apple-pay-trust/check-apple-pay (npm)
4 compromised versions
- May 4, 2026
Malware in @apple-pay-trust/validate-merchant
1 compromised version
- May 4, 2026
Malware in @tw-utils/static
1 compromised version
- May 4, 2026
Malware in @google-pay-trust/authorize-payment
1 compromised version
- May 4, 2026
Malware in @apple-pay-trust/check-apple-pay-result
1 compromised version
- May 4, 2026
Malware in @apple-pay-trust/destroy
1 compromised version
- May 4, 2026
Malware in @tw-models/storage
1 compromised version
- May 4, 2026
Malware in @sbt_gitverse/analytics-client
1 compromised version
- May 4, 2026
Malware in @b2b_blocker/show_activation_error
1 compromised version
- May 4, 2026
Malware in @google-pay-trust/start
1 compromised version
- May 4, 2026
Malware in @apiary-annex/title
1 compromised version
- May 4, 2026
Malware in @google-pay-trust/init-google-pay-result
1 compromised version
- May 4, 2026
Malware in @m0ntana/app.web
1 compromised version
- May 4, 2026
Malware in @ozon-complt/antibot-handler
1 compromised version
- May 4, 2026
Malware in kl-b2c-ui-kit
1 compromised version
- May 4, 2026
Malware in @activation_code/error
1 compromised version
- May 4, 2026
Malware in @activation_code/success
1 compromised version
- May 4, 2026
Malware in @tochka-ui/foundation
1 compromised version
- May 4, 2026
Malware in @apiary-annex/meta
1 compromised version
- May 4, 2026
Malware in @montanatonytest/app.web
1 compromised version
- May 4, 2026
Malware in @business_promocode/apply_promocode
1 compromised version
- May 4, 2026
Malware in @google-pay-trust/finish
1 compromised version
- May 4, 2026
Malware in @ozon-complt/split
1 compromised version
- May 4, 2026
Malware in @apple-pay-trust/start
1 compromised version
- May 4, 2026
Malware in @apple-pay-trust/check-apple-pay
1 compromised version
- May 4, 2026
Malware in @b2b_blocker/hide_activation_error
1 compromised version
- May 4, 2026
Malware in @google-pay-trust/init-google-pay
1 compromised version
- May 4, 2026
Malware in @alfa.life.mapp/app.web
1 compromised version
- May 4, 2026
Malware in @tw-marionette/clipboard
1 compromised version
- May 4, 2026
Malware in @activation_code/activate
1 compromised version
- May 4, 2026
Malware in @business_promocode/cancel_promocode
1 compromised version
- May 4, 2026
Malware in @tw-marionette/input
1 compromised version
- May 4, 2026
Malware in @google-pay-trust/cancelled
1 compromised version
- May 4, 2026
Malware in @apple-pay-trust/finish
1 compromised version
- May 4, 2026
Malware in @apple-pay-trust/authorize-payment
1 compromised version
- May 4, 2026
Malware in @apple-pay-trust/merchant-session
1 compromised version
- May 4, 2026
Malicious code in accesso-angular-cache-buster (npm)
2 compromised versions
- May 4, 2026
Malware in accesso-angular-cache-buster
1 compromised version
- May 4, 2026
Malicious code in wagner-horizon (npm)
- May 4, 2026
Malicious code in vpi-guides (npm)
- May 4, 2026
Malicious code in tinfoil-shops (npm)
- May 4, 2026
Malicious code in temhe-dev (npm)
- May 4, 2026
Malicious code in shopify-draggable (npm)
- May 4, 2026
Malicious code in pos-next-react-native (npm)
- May 4, 2026
Malicious code in pi-exa-mcp (npm)
- May 4, 2026
Malicious code in muenxo (npm)
- May 4, 2026
Malicious code in honcho-theme (npm)
Page 115 of 4,804