Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,347 total in npm · sorted newest first- Dec 3, 2025
Malicious code in elf-stats-fuzzy-sparkler-922 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-fuzzy-pantry-827 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-fuzzy-ornament-236 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-fuzzy-mitten-891 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-fuzzy-marshmallow-280 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-fuzzy-cushion-615 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-frosty-toy-870 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-frosty-candy-152 (npm)
6 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-frostbitten-wishlist-794 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-frostbitten-train-315 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-frostbitten-ribbon-950 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-frostbitten-bow-539 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-flickering-workbench-929 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-flickering-wishlist-695 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-flickering-saddlebag-301 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-flickering-fir-572 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-flickering-candy-280 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-festive-wreath-502 (npm)
4 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-festive-train-714 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-festive-snowglobe-440 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-festive-hollyberry-572 (npm)
3 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-festive-cocoa-106 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-evergreen-workbench-462 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-evergreen-sled-681 (npm)
5 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-evergreen-mitten-361 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-evergreen-mailbag-606 (npm)
6 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-evergreen-fir-211 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-evergreen-chimney-857 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-evergreen-bow-653 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-ember-stockpile-641 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-ember-muffin-717 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-ember-hammer-340 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cranberry-mailbag-505 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-cranberry-icicle-864 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cosy-wishlist-811 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cosy-pantry-344 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cocoa-train-606-pwn (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cocoa-train-606 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cocoa-reindeer-663 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cocoa-northstar-632 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cocoa-muffin-395 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cheery-satchel-119 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cheery-fireplace-598 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cheery-chimney-392 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cheery-bell-343 (npm)
4 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-caroling-toy-109 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-caroling-sleigh-970 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-caroling-hollyberry-628 (npm)
4 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-candystriped-saddlebag-217 (npm)
5 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-candystriped-lantern-205 (npm)
1 compromised version
Page 228 of 4,807