Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,322 total in npm · sorted newest first- Dec 19, 2025
Malicious code in spamsms (npm)
- Dec 19, 2025
Malicious code in sonia3-npm-js (npm)
- Dec 19, 2025
Malicious code in nmapchecker (npm)
- Dec 19, 2025
Malicious code in ddos-gacor-v2 (npm)
- Dec 19, 2025
Malicious code in adeliana-xnetgpt (npm)
- Dec 19, 2025
Malicious code in adel-xnetgpt (npm)
- Dec 19, 2025
Malware in spamsms
1 compromised version
- Dec 19, 2025
Malware in sonia3-npm-js
1 compromised version
- Dec 19, 2025
Malware in xnetgpt-lite
1 compromised version
- Dec 19, 2025
Malware in ddos-gacor-v2
1 compromised version
- Dec 19, 2025
Malware in nmapchecker
1 compromised version
- Dec 19, 2025
Malware in adel-xnetgpt
1 compromised version
- Dec 19, 2025
Malware in xnetgpt
1 compromised version
- Dec 19, 2025
Malware in adeliana-xnetgpt
1 compromised version
- Dec 19, 2025
Malware in zebracros-bahlil
1 compromised version
- Dec 19, 2025
Malware in wifi-killer-xnet
1 compromised version
- Dec 19, 2025
Malicious code in @sodexo-connect/sap-cdc-client (npm)
- Dec 19, 2025
Malware in @sodexo-connect/sap-cdc-client
1 compromised version
- Dec 19, 2025
Malicious code in xmlwtf3 (npm)
- Dec 19, 2025
Malicious code in asdfgh33 (npm)
- Dec 19, 2025
Malware in xmlwtf3
1 compromised version
- Dec 19, 2025
Malware in asdfgh3
1 compromised version
- Dec 19, 2025
Malware in fadafas3
1 compromised version
- Dec 19, 2025
Malware in asdfgh33
1 compromised version
- Dec 19, 2025
Malicious code in ahmed_salem_o (npm)
- Dec 19, 2025
Malware in ahmed_salem_o
1 compromised version
- Dec 19, 2025
Malicious code in ctfvampir (npm)
- Dec 19, 2025
Malicious code in ctfvamp (npm)
- Dec 19, 2025
Malware in ctfvampir
1 compromised version
- Dec 19, 2025
Malware in ctfvamp
1 compromised version
- Dec 19, 2025
Malware in configurator-framework
1 compromised version
- Dec 19, 2025
Malicious code in baidu-tester (npm)
- Dec 19, 2025
Malware in baidu-tester
1 compromised version
- Dec 19, 2025
Malicious code in chai-as-awaited (npm)
- Dec 19, 2025
Malware in chai-as-awaited
1 compromised version
- Dec 19, 2025
Malicious code in elf-stats-wintry-chimney-348 (npm)
1 compromised version
- Dec 19, 2025
Malicious code in elf-stats-cocoa-workshop-459 (npm)
- Dec 19, 2025
Malware in elf-stats-cocoa-workshop-459
1 compromised version
- Dec 19, 2025
Malware in elf-stats-wintry-chimney-348
1 compromised version
- Dec 19, 2025
Malware in elf-stats-caroling-hammer-382
1 compromised version
- Dec 19, 2025
Malicious code in yt-smm (npm)
1 compromised version
- Dec 19, 2025
Malicious code in xvxx (npm)
3 compromised versions
- Dec 19, 2025
Malicious code in vdous (npm)
1 compromised version
- Dec 19, 2025
Malicious code in smm-youtube (npm)
6 compromised versions
- Dec 19, 2025
Malware in xvxx
1 compromised version
- Dec 19, 2025
Malware in vdous
1 compromised version
- Dec 19, 2025
Malware in smm-youtube
1 compromised version
- Dec 19, 2025
Malware in yt-smm
1 compromised version
- Dec 19, 2025
Malicious code in viktorparserctf9 (npm)
- Dec 19, 2025
Malicious code in viktorparserctf8 (npm)
Page 211 of 4,807