Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,347 total in npm · sorted newest first- Dec 3, 2025
Malicious code in elf-stats-snuggly-workshop-421 (npm)
5 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-snuggly-workbench-425 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-snuggly-rocket-941 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-snuggly-cookie-673 (npm)
5 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-snowy-train-725 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-snowy-train-565 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-snowy-snowman-433 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-snowy-sleigh-766 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-snowy-cookiejar-589 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-snowy-candy-850 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-snowdusted-stocking-130 (npm)
3 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-snowdusted-saddlebag-790 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-snowdusted-fireplace-396 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-snowdusted-bauble-104 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sleighing-lantern-878 (npm)
5 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-sleighing-hollyberry-360 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sleighing-hammer-214 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-silvered-snowman-898 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-silvered-mitten-503 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-silvered-bauble-482 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-shimmering-workshop-590 (npm)
9 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-shimmering-workbench-778 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-shimmering-pinecone-965 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-shimmering-northstar-293 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-shimmering-nightcap-245 (npm)
5 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-shimmering-icicle-214 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-shimmering-icicle-213 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-shimmering-icicle-212 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-rooftop-hammer-580 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-rooftop-hammer-362 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-rooftop-garland-184 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-rooftop-candy-837 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-piney-pinecone-203 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-piney-ledger-864 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-piney-icicle-501 (npm)
9 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-piney-garland-824 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-piney-fireplace-695 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-peppermint-stocking-949 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-peppermint-icicle-890 (npm)
4 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-peppermint-candy-233 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-nutmeg-stocking-515 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-nutmeg-nutcracker-538 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-nutmeg-giftbox-398 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-northbound-wishlist-684 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-northbound-wishlist-426 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-northbound-star-801 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-northbound-icicle-485 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-northbound-garland-782 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-mulled-wishlist-789 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-mulled-stockpile-411 (npm)
1 compromised version
Page 226 of 4,807