Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,322 total in npm · sorted newest first- Dec 23, 2025
Malicious code in estree-util (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-whimsical-satchel-586 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-whimsical-cocoa-613 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-whimsical-cocoa-243 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-velvet-sparkler-555 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-velvet-bow-244 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-sprucey-giftbox-118 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-sprucey-cookie-492 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-sparkly-train-831 (npm)
5 compromised versions
- Dec 23, 2025
Malicious code in elf-stats-sparkly-toolkit-703 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-sparkly-sled-484 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-sleighing-hammer-902 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-silvered-toolkit-914 (npm)
3 compromised versions
- Dec 23, 2025
Malicious code in elf-stats-silvered-bow-679 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-shimmering-fir-491 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-rooftop-pinecone-887 (npm)
2 compromised versions
- Dec 23, 2025
Malicious code in elf-stats-rooftop-mitten-324 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-piney-train-884 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-nutmeg-fir-716 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-mistletoe-muffin-976 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-mistletoe-cookie-256 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-merry-sparkler-797 (npm)
5 compromised versions
- Dec 23, 2025
Malicious code in elf-stats-joyous-saddlebag-967 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-jolly-snowglobe-266 (npm)
5 compromised versions
- Dec 23, 2025
Malicious code in elf-stats-holly-fir-593 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-glittering-cookie-844 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-ginger-bow-370 (npm)
5 compromised versions
- Dec 23, 2025
Malicious code in elf-stats-fuzzy-ribbon-205 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-flickering-satchel-815 (npm)
6 compromised versions
- Dec 23, 2025
Malicious code in elf-stats-festive-marshmallow-962 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-evergreen-lantern-387 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-ember-workbench-742 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-cosy-sled-455 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-cosy-cocoa-331 (npm)
2 compromised versions
- Dec 23, 2025
Malicious code in elf-stats-cocoa-mitten-558 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-caroling-wreath-635 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-caroling-train-677 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-caroling-star-725 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-candlelit-ornament-402 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-bright-pinecone-706 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-aurora-rocket-733 (npm)
1 compromised version
- Dec 23, 2025
Malicious code in elf-stats-aurora-drum-979 (npm)
2 compromised versions
- Dec 23, 2025
Malicious code in ddxq_cms_tools (npm)
1 compromised version
- Dec 23, 2025
Malicious code in ddos-turbo-max (npm)
9 compromised versions
- Dec 23, 2025
Malicious code in ddos-turbo-ecma (npm)
1 compromised version
- Dec 23, 2025
Malicious code in corplib (npm)
4 compromised versions
- Dec 23, 2025
Malicious code in cookie-mapper (npm)
1 compromised version
- Dec 23, 2025
Malicious code in cookie-breaker (npm)
1 compromised version
- Dec 23, 2025
Malicious code in cms_comp_popup (npm)
1 compromised version
- Dec 23, 2025
Malicious code in chai-pack (npm)
3 compromised versions
Page 209 of 4,807