Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,346 total in npm · sorted newest first- Dec 16, 2025
Malicious code in nad-home (npm)
2 compromised versions
- Dec 16, 2025
Malicious code in i18never (npm)
1 compromised version
- Dec 16, 2025
Malware in i18never
1 compromised version
- Dec 16, 2025
Malware in smart-utils-alice
1 compromised version
- Dec 16, 2025
Malware in nad-home
1 compromised version
- Dec 16, 2025
Malicious code in starling-api (npm)
2 compromised versions
- Dec 16, 2025
Malicious code in prod-natwest (npm)
2 compromised versions
- Dec 16, 2025
Malware in starling-api
1 compromised version
- Dec 16, 2025
Malware in prod-natwest
1 compromised version
- Dec 16, 2025
Malware in elf-stats-fuzzy-fir-973
1 compromised version
- Dec 16, 2025
Malicious code in elf-stats-fuzzy-wreath-278 (npm)
- Dec 16, 2025
Malicious code in elf-stats-aurora-cocoa-911 (npm)
- Dec 16, 2025
Malware in elf-stats-fuzzy-wreath-278
1 compromised version
- Dec 16, 2025
Malware in elf-stats-whimsical-snowflake-250
1 compromised version
- Dec 16, 2025
Malware in elf-stats-aurora-cocoa-911
1 compromised version
- Dec 16, 2025
Malicious code in jsondatatoruby (npm)
2 compromised versions
- Dec 16, 2025
Malware in elf-stats-gingersnap-reindeer-987
1 compromised version
- Dec 16, 2025
Malware in elf-stats-mulled-wishlist-789
1 compromised version
- Dec 16, 2025
Malicious code in elf-stats-nutmeg-sleigh-350 (npm)
- Dec 16, 2025
Malware in elf-stats-nutmeg-sleigh-350
1 compromised version
- Dec 16, 2025
Malicious code in betterjsloggin (npm)
- Dec 16, 2025
Malware in betterjsloggin
1 compromised version
- Dec 16, 2025
Malware in @testfei/hallo-word
1 compromised version
- Dec 16, 2025
Malicious code in swissid-common (npm)
3 compromised versions
- Dec 16, 2025
Malicious code in sds-swissid-common (npm)
- Dec 16, 2025
Malware in sds-swissid-common
1 compromised version
- Dec 16, 2025
Malware in swissid-common
1 compromised version
- Dec 16, 2025
Malicious code in sds-oauth-client (npm)
- Dec 16, 2025
Malicious code in sds-auth-ui (npm)
- Dec 16, 2025
Malware in sds-oauth-client
1 compromised version
- Dec 16, 2025
Malware in sds-auth-ui
1 compromised version
- Dec 16, 2025
Malware in angular-trackjs
1 compromised version
- Dec 15, 2025
Malicious code in xboxlive-auth (npm)
- Dec 15, 2025
Malware in xboxlive-auth
1 compromised version
- Dec 15, 2025
Malicious code in bignumex (npm)
2 compromised versions
- Dec 15, 2025
Malware in bignumex
1 compromised version
- Dec 15, 2025
Malicious code in polygon-src (npm)
- Dec 15, 2025
Malware in polygon-src
1 compromised version
- Dec 15, 2025
Malware in wfui-dsm-react-ui
1 compromised version
- Dec 15, 2025
Malware in wfui-dbd-react-ui
1 compromised version
- Dec 15, 2025
Malware in wfui-test-e2e
1 compromised version
- Dec 15, 2025
Malware in @wb-drive/icons
1 compromised version
- Dec 15, 2025
Malicious code in @revvity-signals/chemdraw-js (npm)
2 compromised versions
- Dec 15, 2025
Malware in @revvity-signals/chemdraw-js
1 compromised version
- Dec 15, 2025
Malicious code in sd-skbms (npm)
1 compromised version
- Dec 15, 2025
Malicious code in sd-security (npm)
2 compromised versions
- Dec 15, 2025
Malware in sd-skbms
1 compromised version
- Dec 15, 2025
Malware in sd-security
1 compromised version
- Dec 15, 2025
Malicious code in phx-core (npm)
1 compromised version
- Dec 15, 2025
Malware in phx-core
1 compromised version
Page 215 of 4,807