Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,346 total in npm · sorted newest first- Dec 11, 2025
Malicious code in elf-stats-fuzzy-fireplace-615 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-frostbitten-muffin-867 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-frostbitten-cookie-757 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-festive-sleigh-368 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-festive-hollyberry-475 (npm)
2 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-evergreen-workbench-842 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-evergreen-satchel-868 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-evergreen-nightcap-747 (npm)
11 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-ember-stocking-807 (npm)
6 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-ember-cookiejar-768 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-cranberry-saddlebag-402 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-cosy-sparkler-518 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-cosy-ribbon-689 (npm)
2 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-cosy-chimney-268 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-cocoa-pinecone-118 (npm)
2 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-cheery-sparkler-521 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-cheery-sleigh-538 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-cheery-northstar-345 (npm)
2 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-cheery-muffin-949 (npm)
2 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-caroling-workshop-885 (npm)
7 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-caroling-sparkler-130 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-caroling-sled-530 (npm)
4 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-caroling-hammer-382 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-caroling-bow-570 (npm)
2 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-candystriped-workbench-865 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-candystriped-star-592 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-candystriped-muffin-773 (npm)
2 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-candystriped-cookiejar-799 (npm)
6 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-candystriped-bauble-740 (npm)
4 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-candlelit-train-228 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-candlelit-nutcracker-184 (npm)
5 compromised versions
- Dec 11, 2025
Malicious code in elf-stats-aurora-sparkler-752 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats-aurora-sleigh-694 (npm)
1 compromised version
- Dec 11, 2025
Malicious code in elf-stats (npm)
1 compromised version
- Dec 11, 2025
Malicious code in mw-proto-ts (npm)
1 compromised version
- Dec 11, 2025
Malicious code in mui-wrapper-icons (npm)
1 compromised version
- Dec 11, 2025
Malicious code in mui-wrapper-styles (npm)
1 compromised version
- Dec 11, 2025
Malicious code in tnaxmlparserctf (npm)
1 compromised version
- Dec 11, 2025
Malicious code in tnaparserxml (npm)
- Dec 11, 2025
Malicious code in ofjaaah12 (npm)
- Dec 11, 2025
Malicious code in libxmlussr (npm)
- Dec 11, 2025
Malicious code in libxmlpupupu (npm)
- Dec 11, 2025
Malicious code in libxmljsololos (npm)
- Dec 11, 2025
Malicious code in libxmljsololo4 (npm)
- Dec 11, 2025
Malicious code in libxmljsololo3 (npm)
- Dec 11, 2025
Malicious code in libxmljsololo (npm)
- Dec 11, 2025
Malicious code in libxmljs2var234 (npm)
- Dec 11, 2025
Malicious code in libxmljs10 (npm)
- Dec 11, 2025
Malicious code in libxmlhere (npm)
- Dec 11, 2025
Malicious code in libxmlfinal5 (npm)
Page 218 of 4,807