Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,346 total in npm · sorted newest first- Dec 5, 2025
Malicious code in tailwindcss-setfont (npm)
- Dec 5, 2025
Malware in tailwindcss-setfont
1 compromised version
- Dec 5, 2025
Malicious code in tailwindcss-animation-helper (npm)
- Dec 5, 2025
Malware in tailwindcss-animation-helper
1 compromised version
- Dec 5, 2025
Malicious code in seeds-random (npm)
1 compromised version
- Dec 5, 2025
Malware in seeds-random
1 compromised version
- Dec 5, 2025
Malicious code in react-svg-fill (npm)
- Dec 5, 2025
Malware in react-svg-fill
1 compromised version
- Dec 5, 2025
Malicious code in react-svg-supporter (npm)
- Dec 5, 2025
Malicious code in react-svg-bundler (npm)
- Dec 5, 2025
Malware in react-svg-supporter
1 compromised version
- Dec 5, 2025
Malware in react-svg-bundler
1 compromised version
- Dec 5, 2025
Malicious code in react-icon-updater (npm)
- Dec 5, 2025
Malware in react-icon-updater
1 compromised version
- Dec 5, 2025
Malicious code in jsonify-settings (npm)
- Dec 5, 2025
Malware in jsonify-settings
1 compromised version
- Dec 5, 2025
Malicious code in node-tailwind (npm)
- Dec 5, 2025
Malicious code in node-dpapi1 (npm)
- Dec 5, 2025
Malicious code in module-listener (npm)
- Dec 5, 2025
Malware in node-dpapi1
1 compromised version
- Dec 5, 2025
Malware in module-listener
1 compromised version
- Dec 5, 2025
Malware in node-tailwind
1 compromised version
- Dec 4, 2025
Malicious code in elf-stats-northbound-sparkler-410 (npm)
2 compromised versions
- Dec 4, 2025
Malicious code in elf-stats-snowdusted-cookiejar-250 (npm)
1 compromised version
- Dec 4, 2025
Malicious code in elf-stats-caroling-wishlist-626 (npm)
2 compromised versions
- Dec 4, 2025
Malicious code in elf-stats-ginger-wreath-646 (npm)
1 compromised version
- Dec 4, 2025
Malware in elf-stats-piney-icicle-501
1 compromised version
- Dec 4, 2025
Malware in elf-stats-ginger-icicle-707
1 compromised version
- Dec 4, 2025
Malicious code in sd-notexsit (npm)
1 compromised version
- Dec 4, 2025
Malware in elf-stats-candlelit-reindeer-881
1 compromised version
- Dec 4, 2025
Malware in elf-stats-mulled-stocking-538
1 compromised version
- Dec 4, 2025
Malicious code in elf-stats-mulled-ornament-810 (npm)
- Dec 4, 2025
Malicious code in elf-stats-marzipan-cocoa-562 (npm)
- Dec 4, 2025
Malicious code in elf-stats-lanternlit-snowman-834 (npm)
- Dec 4, 2025
Malicious code in elf-stats-candlelit-marshmallow-663 (npm)
- Dec 4, 2025
Malicious code in elf-stats-bright-cocoa-293 (npm)
- Dec 4, 2025
Malicious code in beep-types (npm)
- Dec 4, 2025
Malware in elf-stats-marzipan-cocoa-562
1 compromised version
- Dec 4, 2025
Malware in elf-stats-lanternlit-snowman-834
1 compromised version
- Dec 4, 2025
Malware in elf-stats-mulled-ornament-810
1 compromised version
- Dec 4, 2025
Malware in elf-stats-candlelit-marshmallow-663
1 compromised version
- Dec 4, 2025
Malware in elf-stats-bright-cocoa-293
1 compromised version
- Dec 4, 2025
Malware in beep-types
1 compromised version
- Dec 4, 2025
Malware in remark-stringify10
1 compromised version
- Dec 4, 2025
Malware in unified10
1 compromised version
- Dec 4, 2025
Malware in hast-util-to-mdast9
1 compromised version
- Dec 4, 2025
Malware in remark-mdx2.3
1 compromised version
- Dec 4, 2025
Malware in unified11
1 compromised version
- Dec 4, 2025
Malware in remark-parse10
1 compromised version
- Dec 4, 2025
Malicious code in elf-stats-jubilant-ornament-641 (npm)
Page 222 of 4,807