Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,347 total in npm · sorted newest first- Dec 3, 2025
Malicious code in elf-stats-mulled-rocket-415 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-mulled-drum-529 (npm)
3 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-mistletoe-pinecone-620 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-mistletoe-bell-913 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-midnight-wreath-655 (npm)
3 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-midnight-workbench-208 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-midnight-toy-513 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-midnight-star-734 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-midnight-pinecone-982 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-midnight-mitten-226 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-midnight-drum-606 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-merry-stocking-539 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-merry-sparkler-742 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-merry-cookiejar-915 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-merry-cookiejar-754 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-merry-chimney-765 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-merry-bell-515 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-marzipan-muffin-733 (npm)
7 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-marzipan-fir-795 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-marzipan-fir-219 (npm)
8 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-marzipan-cookiejar-316 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-magical-sleigh-777 (npm)
11 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-lanternlit-fir-170 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-lanternlit-fir-106 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-jubilant-chimney-189 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-joyous-toy-934 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-joyous-toy-475 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-joyous-sparkler-816 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-joyous-sparkler-347 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-joyous-sled-261 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-joyous-pinecone-528 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-joyous-mailbag-164 (npm)
15 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-joyous-hollyberry-379 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-joyous-fireplace-187 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-jolly-toolkit-984 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-holly-stockpile-968 (npm)
3 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-holly-hammer-741 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-glittering-wishlist-537 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-glittering-nutcracker-591 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-glittering-marshmallow-217 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-glittering-lantern-418 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-glittering-cookie-772 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-gingersnap-sparkler-768 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-gingersnap-reindeer-987 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-gingersnap-pinecone-440 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-ginger-workshop-948 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-ginger-ledger-106 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-ginger-icicle-707 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-ginger-cookiejar-383 (npm)
5 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-ginger-bell-819 (npm)
1 compromised version
Page 227 of 4,807