Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,346 total in npm · sorted newest first- Dec 19, 2025
Malicious code in ctfxmlflgcheck (npm)
- Dec 19, 2025
Malicious code in ctfparsertna (npm)
- Dec 19, 2025
Malware in ctfxmlflgcheck
1 compromised version
- Dec 19, 2025
Malware in ctfparsertna
1 compromised version
- Dec 19, 2025
Malicious code in parashaxmgflhg (npm)
- Dec 19, 2025
Malicious code in flagstealerfinal (npm)
- Dec 19, 2025
Malicious code in tnactgfds (npm)
- Dec 19, 2025
Malicious code in my-ctf-package (npm)
- Dec 19, 2025
Malicious code in ctfepakageflgs (npm)
- Dec 19, 2025
Malware in ctfepakageflgs
1 compromised version
- Dec 19, 2025
Malware in flagstealerfinal
1 compromised version
- Dec 19, 2025
Malware in tnactgfds
1 compromised version
- Dec 19, 2025
Malware in my-ctf-package
1 compromised version
- Dec 19, 2025
Malware in parashaxmgflhg
1 compromised version
- Dec 19, 2025
Malware in tnaparserxml
1 compromised version
- Dec 19, 2025
Malicious code in react-enhanced-glow (npm)
- Dec 19, 2025
Malware in react-enhanced-glow
1 compromised version
- Dec 18, 2025
Malicious code in sarumaan_a (npm)
2 compromised versions
- Dec 18, 2025
Malware in elf-stats-ember-stocking-807
1 compromised version
- Dec 18, 2025
Malware in elf-stats-rooftop-hammer-580
1 compromised version
- Dec 17, 2025
Malicious code in xbox-bottomnav (npm)
2 compromised versions
- Dec 17, 2025
Malware in elf-stats-festive-sparkler-275
1 compromised version
- Dec 17, 2025
Malware in vitor-js
1 compromised version
- Dec 17, 2025
Malware in plugin-senna
1 compromised version
- Dec 17, 2025
Malicious code in vitor-js (npm)
2 compromised versions
- Dec 17, 2025
Malicious code in plugin-senna (npm)
4 compromised versions
- Dec 16, 2025
Malicious code in vscode-azure-mcp-server (npm)
1 compromised version
- Dec 16, 2025
Malware in elf-stats-holly-stocking-294
1 compromised version
- Dec 16, 2025
Malware in elf-stats-fuzzy-fireplace-615
1 compromised version
- Dec 16, 2025
Malware in elf-stats-marzipan-cocoa-977
1 compromised version
- Dec 16, 2025
Malware in elf-stats-sugarplum-snowman-116
1 compromised version
- Dec 16, 2025
Malware in elf-stats-aurora-sleigh-694
1 compromised version
- Dec 16, 2025
Malicious code in raven-hubspot (npm)
1 compromised version
- Dec 16, 2025
Malicious code in tailwind-variables (npm)
- Dec 16, 2025
Malicious code in tailwind-stylecss (npm)
- Dec 16, 2025
Malware in tailwind-stylecss
1 compromised version
- Dec 16, 2025
Malware in tailwind-variables
1 compromised version
- Dec 16, 2025
Malicious code in bigmathlib (npm)
3 compromised versions
- Dec 16, 2025
Malware in bigmathlib
1 compromised version
- Dec 16, 2025
Malware in elf-stats-cosy-ribbon-689
1 compromised version
- Dec 16, 2025
Malware in elf-stats-jubilant-wreath-403
1 compromised version
- Dec 16, 2025
Malware in elf-stats-ember-hammer-340
1 compromised version
- Dec 16, 2025
Malware in elf-stats-fuzzy-marshmallow-280
1 compromised version
- Dec 16, 2025
Malicious code in openhands-frontend (npm)
1 compromised version
- Dec 16, 2025
Malicious code in example-vue2-micro (npm)
1 compromised version
- Dec 16, 2025
Malicious code in dubbo-js-private-workspace (npm)
1 compromised version
- Dec 16, 2025
Malware in dubbo-js-private-workspace
1 compromised version
- Dec 16, 2025
Malware in openhands-frontend
1 compromised version
- Dec 16, 2025
Malware in example-vue2-micro
1 compromised version
- Dec 16, 2025
Malicious code in smart-utils-alice (npm)
6 compromised versions
Page 214 of 4,807