Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,346 total in npm · sorted newest first- Dec 3, 2025
Malicious code in elf-stats-sleighing-mailbag-109 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-silvered-stocking-120 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-shimmering-workbench-301 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in remark-stringify10 (npm)
- Dec 3, 2025
Malicious code in elf-stats-marzipan-pantry-560 (npm)
4 compromised versions
- Dec 3, 2025
Malicious code in remark-parse10 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-tinsel-train-397 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in remark-mdx2.3 (npm)
- Dec 3, 2025
Malicious code in elf-stats-merry-cookiejar-646 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-merry-cookiejar-511 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-nutmeg-stockpile-999 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-wintry-cocoa-831 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-whimsical-chimney-949 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-velvet-snowman-470 (npm)
5 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-velvet-ornament-148 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sugarplum-muffin-944 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-storybook-snowglobe-157 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-storybook-marshmallow-471 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sprucey-stockpile-628 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-snuggly-ornament-764 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-snowy-candy-518 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-snowy-bow-730 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-snowdusted-drum-647 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-snowdusted-cocoa-694 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sleighing-nutcracker-806 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-piney-nightcap-782 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-piney-icicle-383 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-peppermint-hollyberry-893 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-nutmeg-cookie-584 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-mulled-stocking-538 (npm)
4 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-midnight-chimney-291 (npm)
6 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-merry-cookiejar-442 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-jubilant-bow-187 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-glittering-reindeer-615 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-glittering-nutcracker-709 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-glittering-fir-252 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-gingersnap-ornament-469 (npm)
4 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-fuzzy-hollyberry-736 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-frostbitten-reindeer-875 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-ember-reindeer-211 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cranberry-hollyberry-804 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cocoa-train-606-pwn2 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cocoa-fir-846 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cocoa-cocoa-280 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-caroling-mailbag-397 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-nutmeg-cocoa-967 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in hast-util-to-mdast9 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cocoa-ribbon-476 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-merry-garland-548 (npm)
3 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-sleighing-stocking-579 (npm)
4 compromised versions
Page 224 of 4,807