Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,347 total in npm · sorted newest first- Dec 3, 2025
Malicious code in elf-stats-sleighing-stocking-579 (npm)
4 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-ginger-reindeer-411 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-wintry-sled-578 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-wintry-satchel-723 (npm)
4 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-wintry-ornament-960 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-wintry-icicle-283 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-wintry-hollyberry-832 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-wintry-hammer-196 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-wintry-fir-892 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-whimsical-snowflake-250 (npm)
3 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-whimsical-rocket-922 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-whimsical-muffin-613 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-whimsical-marshmallow-258 (npm)
3 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-whimsical-marshmallow-212 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-whimsical-ledger-767 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-whimsical-lantern-823 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-velvet-ornament-935 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-velvet-cocoa-992 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-twinkling-wreath-730 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-twinkling-sled-276 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-twinkling-reindeer-382 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-twinkling-marshmallow-913 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-twinkling-ledger-989 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-twinkling-ledger-863 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-tinsel-pantry-856 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-tinsel-giftbox-192 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-tinsel-drum-369 (npm)
5 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-sugarplum-workshop-950 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sugarplum-stockpile-238 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sugarplum-star-404 (npm)
3 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-sugarplum-saddlebag-236 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sugarplum-fireplace-278 (npm)
3 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-storybook-stocking-662 (npm)
3 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-storybook-reindeer-552 (npm)
17 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-storybook-marshmallow-729 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-storybook-cookiejar-481 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-storybook-cookiejar-394 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-storybook-bow-866 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-starlit-train-195 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-starlit-rocket-905 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-starlit-northstar-873 (npm)
4 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-starlit-mitten-980 (npm)
31 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-sprucey-train-471 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sprucey-snowman-250 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sprucey-mitten-825 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-sprucey-icicle-606 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sparkly-snowflake-139 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sparkly-cushion-340 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sparkly-cocoa-863 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sparkly-bow-901 (npm)
1 compromised version
Page 225 of 4,807