Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,346 total in npm · sorted newest first- Dec 15, 2025
Malicious code in paypal-scripts-server-utils (npm)
3 compromised versions
- Dec 15, 2025
Malware in paypal-scripts-server-utils
1 compromised version
- Dec 15, 2025
Malicious code in @mohamed1687/iut-encrypt (npm)
- Dec 15, 2025
Malware in @mohamed1687/iut-encrypt
1 compromised version
- Dec 15, 2025
Malware in elf-stats-marzipan-muffin-733
1 compromised version
- Dec 15, 2025
Malware in elf-stats-candlelit-nutcracker-184
1 compromised version
- Dec 15, 2025
Malware in elf-stats-evergreen-muffin-867
1 compromised version
- Dec 15, 2025
Malware in elf-stats-sugarplum-fireplace-278
1 compromised version
- Dec 14, 2025
Malicious code in @ikarem/telemetry (npm)
12 compromised versions
- Dec 12, 2025
Malware in hl-naduccio
1 compromised version
- Dec 12, 2025
Malicious code in kashif-mallah-fca (npm)
- Dec 12, 2025
Malware in kashif-mallah-fca
1 compromised version
- Dec 12, 2025
Malicious code in iraza2-fca (npm)
- Dec 12, 2025
Malware in iraza2-fca
1 compromised version
- Dec 12, 2025
Malicious code in uba-plugins (npm)
1 compromised version
- Dec 12, 2025
Malicious code in sd-pay-ts (npm)
1 compromised version
- Dec 12, 2025
Malicious code in sd-pay (npm)
1 compromised version
- Dec 12, 2025
Malicious code in pp-js-lib (npm)
1 compromised version
- Dec 12, 2025
Malicious code in eslint-config-zoo (npm)
1 compromised version
- Dec 12, 2025
Malicious code in cms_comp_static (npm)
1 compromised version
- Dec 12, 2025
Malicious code in cms_comp (npm)
3 compromised versions
- Dec 12, 2025
Malicious code in camscanner-seo (npm)
1 compromised version
- Dec 12, 2025
Malware in sd-pay-ts
1 compromised version
- Dec 12, 2025
Malware in uba-plugins
1 compromised version
- Dec 12, 2025
Malware in camscanner-seo
1 compromised version
- Dec 12, 2025
Malware in eslint-config-zoo
1 compromised version
- Dec 12, 2025
Malware in sd-pay
1 compromised version
- Dec 12, 2025
Malware in cms_comp_static
1 compromised version
- Dec 12, 2025
Malware in cms_comp
1 compromised version
- Dec 12, 2025
Malware in pp-js-lib
1 compromised version
- Dec 12, 2025
Malicious code in sdbao-content-sems (npm)
1 compromised version
- Dec 12, 2025
Malicious code in sdbao-content-report (npm)
1 compromised version
- Dec 12, 2025
Malicious code in cos-js-sdk-v6 (npm)
1 compromised version
- Dec 12, 2025
Malware in sdbao-content-report
1 compromised version
- Dec 12, 2025
Malware in cos-js-sdk-v6
1 compromised version
- Dec 12, 2025
Malware in sdbao-content-sems
1 compromised version
- Dec 12, 2025
Malware in pluxee-design-system
1 compromised version
- Dec 12, 2025
Malicious code in abrhide (npm)
1 compromised version
- Dec 12, 2025
Malware in abrhide
1 compromised version
- Dec 12, 2025
Malicious code in shopify-monorail (npm)
1 compromised version
- Dec 12, 2025
Malware in wds-icons
1 compromised version
- Dec 12, 2025
Malware in shopify-monorail
1 compromised version
- Dec 12, 2025
Malware in browser-client-neptune
1 compromised version
- Dec 12, 2025
Malicious code in hfruitmaliciousxmlparser (npm)
- Dec 12, 2025
Malicious code in gfruitmaliciousxmlparser (npm)
- Dec 12, 2025
Malicious code in fruit-malicious-xml-parser (npm)
- Dec 12, 2025
Malicious code in ffruitmaliciousxmlparser (npm)
- Dec 12, 2025
Malicious code in efruitmaliciousxmlparser (npm)
1 compromised version
- Dec 12, 2025
Malicious code in dfruitmaliciousxmlparser (npm)
- Dec 12, 2025
Malicious code in cfruitmaliciousxmlparser (npm)
1 compromised version
Page 216 of 4,807