Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,346 total in npm · sorted newest first- Dec 12, 2025
Malicious code in bfruitmaliciousxmlparser (npm)
- Dec 12, 2025
Malicious code in afruitmaliciousxmlparser (npm)
- Dec 12, 2025
Malware in dfruitmaliciousxmlparser
1 compromised version
- Dec 12, 2025
Malware in bfruitmaliciousxmlparser
1 compromised version
- Dec 12, 2025
Malware in fruit-malicious-xml-parser
1 compromised version
- Dec 12, 2025
Malware in gfruitmaliciousxmlparser
1 compromised version
- Dec 12, 2025
Malware in hfruitmaliciousxmlparser
1 compromised version
- Dec 12, 2025
Malware in efruitmaliciousxmlparser
1 compromised version
- Dec 12, 2025
Malware in ffruitmaliciousxmlparser
1 compromised version
- Dec 12, 2025
Malware in cfruitmaliciousxmlparser
1 compromised version
- Dec 12, 2025
Malware in afruitmaliciousxmlparser
1 compromised version
- Dec 12, 2025
Malware in @cheqplease/structured-logger
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-twinkling-wishlist-283 (npm)
11 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-twinkling-bell-867 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-tinsel-sleigh-669 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-tinsel-cookiejar-315 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-sugarplum-wishlist-141 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-sugarplum-toolkit-176 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-sugarplum-snowman-116 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-sprucey-train-710 (npm)
2 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-sparkly-toolkit-821 (npm)
4 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-sparkly-fir-398 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-snuggly-nutcracker-187 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-snowdusted-saddlebag-127 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-snowdusted-marshmallow-228 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-snowdusted-bell-846 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-sleighing-drum-467 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-silvered-wishlist-708 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-silvered-cushion-811 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-rooftop-wishlist-723 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-peppermint-wishlist-307 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-peppermint-fir-730 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-nutmeg-candy-869 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-northbound-cocoa-368 (npm)
3 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-northbound-bauble-535 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-mistletoe-mailbag-834 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-midnight-rocket-499 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-merry-hammer-791 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-merry-cookiejar-796 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-marzipan-nightcap-982 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-marzipan-cocoa-977 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-lanternlit-cocoa-651 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-jubilant-wreath-403 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-joyous-ribbon-819 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-jolly-ornament-687 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-holly-stocking-294 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-holly-candy-802 (npm)
4 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-gingersnap-mitten-648 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-ginger-hollyberry-135 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-fuzzy-workbench-102 (npm)
1 compromised version
Page 217 of 4,807