Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,322 total in npm · sorted newest first- Dec 23, 2025
Malicious code in node-calculator-x7k9-evil (npm)
1 compromised version
- Dec 23, 2025
Malicious code in node-calculator-fe54 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in node-calculator-f483 (npm)
5 compromised versions
- Dec 23, 2025
Malicious code in node-calculator-f2af (npm)
1 compromised version
- Dec 23, 2025
Malicious code in node-calculator-e776 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in node-calculator-dfd9 (npm)
6 compromised versions
- Dec 23, 2025
Malicious code in node-calculator-bde6 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in node-calculator-ad83 (npm)
3 compromised versions
- Dec 23, 2025
Malicious code in node-calculator-ab44 (npm)
2 compromised versions
- Dec 23, 2025
Malicious code in node-calculator-a34e (npm)
9 compromised versions
- Dec 23, 2025
Malicious code in node-calculator-98ba (npm)
1 compromised version
- Dec 23, 2025
Malicious code in node-calculator-8f0c (npm)
1 compromised version
- Dec 23, 2025
Malicious code in node-calculator-7b82 (npm)
3 compromised versions
- Dec 23, 2025
Malicious code in node-calculator-78c0 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in node-calculator-73dd (npm)
1 compromised version
- Dec 23, 2025
Malicious code in node-calculator-603e (npm)
4 compromised versions
- Dec 23, 2025
Malicious code in node-calculator-5b8f (npm)
2 compromised versions
- Dec 23, 2025
Malicious code in node-calculator-40ed (npm)
2 compromised versions
- Dec 23, 2025
Malicious code in node-calculator-2eb4 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in node-calculator-290c (npm)
2 compromised versions
- Dec 23, 2025
Malicious code in node-calculator-190a (npm)
1 compromised version
- Dec 23, 2025
Malicious code in no-use-extend-native (npm)
2 compromised versions
- Dec 23, 2025
Malicious code in no-unsanitized (npm)
2 compromised versions
- Dec 23, 2025
Malicious code in nintendo-test (npm)
1 compromised version
- Dec 23, 2025
Malicious code in ke-moma2 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in ke-moma (npm)
1 compromised version
- Dec 23, 2025
Malicious code in karem6 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in jz-user-js-bridge (npm)
1 compromised version
- Dec 23, 2025
Malicious code in jz-ui-user (npm)
1 compromised version
- Dec 23, 2025
Malicious code in jz-native-js-bridge (npm)
1 compromised version
- Dec 23, 2025
Malicious code in jsxswap (npm)
1 compromised version
- Dec 23, 2025
Malicious code in jstoauto (npm)
1 compromised version
- Dec 23, 2025
Malicious code in jsswapper (npm)
1 compromised version
- Dec 23, 2025
Malicious code in jsonupon (npm)
1 compromised version
- Dec 23, 2025
Malicious code in jsonrecap (npm)
1 compromised version
- Dec 23, 2025
Malicious code in jsonauto (npm)
1 compromised version
- Dec 23, 2025
Malicious code in jsonauthcap (npm)
1 compromised version
- Dec 23, 2025
Malicious code in jsonauth (npm)
1 compromised version
- Dec 23, 2025
Malicious code in jsonapptoken (npm)
1 compromised version
- Dec 23, 2025
Malicious code in json-panels (npm)
1 compromised version
- Dec 23, 2025
Malicious code in jest-formatting (npm)
1 compromised version
- Dec 23, 2025
Malicious code in intuit-test (npm)
1 compromised version
- Dec 23, 2025
Malicious code in injectorpackage (npm)
1 compromised version
- Dec 23, 2025
Malicious code in init-router (npm)
1 compromised version
- Dec 23, 2025
Malicious code in ingka-test (npm)
1 compromised version
- Dec 23, 2025
Malicious code in hiro-docs (npm)
1 compromised version
- Dec 23, 2025
Malicious code in gibertserct8 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in gibertserct15 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in flagstealer (npm)
2 compromised versions
- Dec 23, 2025
Malicious code in fe-cdnpath-transform (npm)
1 compromised version
Page 208 of 4,807