Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,346 total in npm · sorted newest first- Dec 4, 2025
Malware in elf-stats-jubilant-ornament-641
1 compromised version
- Dec 4, 2025
Malicious code in volume-viz (npm)
1 compromised version
- Dec 4, 2025
Malicious code in elf-stats-festive-sparkler-275 (npm)
7 compromised versions
- Dec 3, 2025
Malicious code in tailwindcss-animation-css (npm)
- Dec 3, 2025
Malicious code in email-validated (npm)
- Dec 3, 2025
Malicious code in email-regexed (npm)
- Dec 3, 2025
Malware in tailwindcss-animation-css
1 compromised version
- Dec 3, 2025
Malware in email-validated
1 compromised version
- Dec 3, 2025
Malware in email-regexed
1 compromised version
- Dec 3, 2025
Malicious code in dotenv-intend (npm)
1 compromised version
- Dec 3, 2025
Malicious code in chai-test-await (npm)
1 compromised version
- Dec 3, 2025
Malware in chai-test-await
1 compromised version
- Dec 3, 2025
Malware in dotenv-intend
1 compromised version
- Dec 3, 2025
Malicious code in self-service-portal-prod (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-frostbitten-pantry-235 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-candystriped-chimney-879 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-aurora-toy-659 (npm)
4 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-evergreen-pantry-410 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sprucey-fireplace-355 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-sugarplum-cookiejar-287 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sparkly-candy-805 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-joyous-train-754 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-tinsel-sparkler-289 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-twinkling-ribbon-344 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-mulled-nightcap-782 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in @bhyolken/echotest (npm)
3 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-snowy-northstar-860 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-merry-cookiejar-139 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-candystriped-ornament-933 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sugarplum-ribbon-151 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sleighing-mailbag-621 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-silvered-star-676 (npm)
3 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-nutmeg-garland-645 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-snowdusted-stockpile-595 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-jolly-workshop-110 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-snowdusted-lantern-234 (npm)
8 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-tinsel-candy-605 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-snowdusted-train-837 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-rooftop-fireplace-499 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-rooftop-cocoa-966 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-joyous-hollyberry-121 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-flickering-ornament-344 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-festive-workshop-566 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-midnight-saddlebag-720 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in unified11 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in stats-engine (npm)
- Dec 3, 2025
Malicious code in elf-stats-frostbitten-drum-529 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in unified10 (npm)
- Dec 3, 2025
Malicious code in elf-stats-holly-wishlist-355 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-shimmering-muffin-598 (npm)
1 compromised version
Page 223 of 4,807