Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,322 total in npm · sorted newest first- Dec 24, 2025
Malicious code in adril7123 (npm)
- Dec 24, 2025
Malware in adril7123
1 compromised version
- Dec 24, 2025
Malicious code in @airtel-web/clickstream (npm)
4 compromised versions
- Dec 24, 2025
Malicious code in secguest-react-lib (npm)
2 compromised versions
- Dec 23, 2025
Malware in mw-proto-ts
1 compromised version
- Dec 23, 2025
Malware in mui-wrapper-styles
1 compromised version
- Dec 23, 2025
Malware in mw-frontend-utils
1 compromised version
- Dec 23, 2025
Malicious code in @google_recaptcha/js (npm)
- Dec 23, 2025
Malware in mui-wrapper-core
1 compromised version
- Dec 23, 2025
Malware in @google_recaptcha/js
1 compromised version
- Dec 23, 2025
Malware in mui-wrapper-icons
1 compromised version
- Dec 23, 2025
Malware in @vienna_cancer_center_portal/js
1 compromised version
- Dec 23, 2025
Malicious code in supply_chain_dummy_test_4 (npm)
- Dec 23, 2025
Malicious code in supply_chain_dummy_test_3 (npm)
2 compromised versions
- Dec 23, 2025
Malicious code in supply_chain_dummy_test_2 (npm)
1 compromised version
- Dec 23, 2025
Malware in supply_chain_dummy_test_3
1 compromised version
- Dec 23, 2025
Malware in supply_chain_dummy_test_4
1 compromised version
- Dec 23, 2025
Malware in supply_chain_dummy_test_2
1 compromised version
- Dec 23, 2025
Malicious code in supply_chain_dummy_test_1 (npm)
- Dec 23, 2025
Malware in supply_chain_dummy_test_1
1 compromised version
- Dec 23, 2025
Malicious code in dotjsenv (npm)
1 compromised version
- Dec 23, 2025
Malware in dotjsenv
1 compromised version
- Dec 23, 2025
Malicious code in trial-guard (npm)
- Dec 23, 2025
Malicious code in start-log-plugin (npm)
- Dec 23, 2025
Malicious code in start-log-backend (npm)
- Dec 23, 2025
Malicious code in qxytest1 (npm)
- Dec 23, 2025
Malicious code in qxytest (npm)
- Dec 23, 2025
Malware in trial-guard
1 compromised version
- Dec 23, 2025
Malware in start-log-backend
1 compromised version
- Dec 23, 2025
Malware in start-log-plugin
1 compromised version
- Dec 23, 2025
Malware in qxytest
1 compromised version
- Dec 23, 2025
Malware in qxytest1
1 compromised version
- Dec 23, 2025
Malicious code in chai-max (npm)
2 compromised versions
- Dec 23, 2025
Malware in chai-max
1 compromised version
- Dec 23, 2025
Malicious code in chai-async-chains (npm)
1 compromised version
- Dec 23, 2025
Malware in chai-async-chains
1 compromised version
- Dec 23, 2025
Malicious code in rpc-validate (npm)
- Dec 23, 2025
Malicious code in excluder-mcp-package (npm)
- Dec 23, 2025
Malicious code in excluder-mcp (npm)
- Dec 23, 2025
Malware in rpc-validate
1 compromised version
- Dec 23, 2025
Malware in excluder-mcp-package
1 compromised version
- Dec 23, 2025
Malware in excluder-mcp
1 compromised version
- Dec 23, 2025
Malware in yunxoahng2
1 compromised version
- Dec 23, 2025
Malware in yunxohang3
1 compromised version
- Dec 23, 2025
Malware in mws-common-ui
1 compromised version
- Dec 23, 2025
Malicious code in lotusbail (npm)
- Dec 23, 2025
Malware in lotusbail
1 compromised version
- Dec 23, 2025
Malicious code in @aa-techops-ui/ping-authentication (npm)
13 compromised versions
- Dec 23, 2025
Malware in @aa-techops-ui/ping-authentication
1 compromised version
- Dec 23, 2025
Malware in vue2-amis-custom-widget-pro
1 compromised version
Page 206 of 4,807