Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,346 total in npm · sorted newest first- Dec 10, 2025
Malicious code in fastavro (npm)
- Dec 10, 2025
Malicious code in datadog-checks-downloader (npm)
- Dec 10, 2025
Malicious code in datadog-checks-dependency-provider (npm)
- Dec 10, 2025
Malicious code in confluent-kafka (npm)
- Dec 10, 2025
Malware in rum-events-format
1 compromised version
- Dec 10, 2025
Malware in signup-failover
1 compromised version
- Dec 10, 2025
Malware in confluent-kafka
1 compromised version
- Dec 10, 2025
Malware in datadog-checks-downloader
1 compromised version
- Dec 10, 2025
Malware in wasm-bindgen
1 compromised version
- Dec 10, 2025
Malware in datadog-checks-dependency-provider
1 compromised version
- Dec 10, 2025
Malware in sfdc-abstract-legend
1 compromised version
- Dec 10, 2025
Malware in fastavro
1 compromised version
- Dec 10, 2025
Malware in datadog-checks-base
1 compromised version
- Dec 10, 2025
Malware in self-service-portal-prod
1 compromised version
- Dec 10, 2025
Malware in pymongo
1 compromised version
- Dec 10, 2025
Malicious code in portal-lim (npm)
- Dec 10, 2025
Malware in portal-lim
1 compromised version
- Dec 10, 2025
Malicious code in database-mongoose-kit (npm)
1 compromised version
- Dec 10, 2025
Malware in database-mongoose-kit
1 compromised version
- Dec 10, 2025
Malicious code in @onlytoodles/crypto-jsa (npm)
- Dec 10, 2025
Malware in @onlytoodles/crypto-jsa
1 compromised version
- Dec 10, 2025
Malicious code in wartsila-text-csv (npm)
1 compromised version
- Dec 10, 2025
Malware in wartsila-text-csv
1 compromised version
- Dec 10, 2025
Malware in wartsila-application-json
1 compromised version
- Dec 10, 2025
Malicious code in serval-integrations-common-frontend (npm)
1 compromised version
- Dec 10, 2025
Malware in serval-integrations-common-frontend
1 compromised version
- Dec 10, 2025
Malicious code in node-calculator-0d96 (npm)
4 compromised versions
- Dec 10, 2025
Malware in node-calculator-0d96
1 compromised version
- Dec 10, 2025
Malicious code in malicius-pdf (npm)
- Dec 10, 2025
Malware in malicius-pdf
1 compromised version
- Dec 9, 2025
Malicious code in libxmlrussia (npm)
1 compromised version
- Dec 9, 2025
Malicious code in libxmlussr2 (npm)
1 compromised version
- Dec 9, 2025
Malicious code in libxmlussr1 (npm)
1 compromised version
- Dec 9, 2025
Malicious code in libxmljsololo2 (npm)
1 compromised version
- Dec 9, 2025
Malicious code in libxmljs2woter (npm)
2 compromised versions
- Dec 9, 2025
Malicious code in libxmljs2qwerty (npm)
1 compromised version
- Dec 9, 2025
Malicious code in libxmlfinal2 (npm)
1 compromised version
- Dec 9, 2025
Malicious code in libxmljs2varaboba (npm)
1 compromised version
- Dec 9, 2025
Malicious code in baidu-oscp (npm)
2 compromised versions
- Dec 9, 2025
Malicious code in jsonify-errors (npm)
2 compromised versions
- Dec 9, 2025
Malicious code in chai-uuids (npm)
1 compromised version
- Dec 9, 2025
Malware in chai-uuids
1 compromised version
- Dec 9, 2025
Malware in jsonify-errors
1 compromised version
- Dec 9, 2025
Malicious code in configurator-framework (npm)
1 compromised version
- Dec 8, 2025
Malicious code in shop-api-sdk (npm)
2 compromised versions
- Dec 8, 2025
Malicious code in gs-uitk-lodash (npm)
4 compromised versions
- Dec 8, 2025
Malware in elf-stats-cosy-sleigh-356
1 compromised version
- Dec 8, 2025
Malware in elf-stats-rooftop-stockpile-626
1 compromised version
- Dec 8, 2025
Malicious code in @notrainers/nobtrainer-sdk (npm)
- Dec 8, 2025
Malware in @notrainers/nobtrainer-sdk
1 compromised version
Page 220 of 4,807