Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,347 total in npm · sorted newest first- Dec 3, 2025
Malicious code in elf-stats-candystriped-hollyberry-986 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-candlelit-toy-571 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-candlelit-reindeer-881 (npm)
13 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-bright-star-712 (npm)
3 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-bright-bow-377 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-aurora-workbench-5l3 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-aurora-workbench-513 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-aurora-garland-513 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-aurora-candy-291 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-evergreen-snowglobe-961 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-starlit-ribbon-255 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-mulled-bauble-252 (npm)
5 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-shimmering-lantern-668 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cosy-sleigh-356 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-ginger-hammer-326 (npm)
3 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-frosty-candy-393 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sparkly-garland-970 (npm)
4 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-nutmeg-chimney-245 (npm)
6 compromised versions
- Dec 3, 2025
Malicious code in buffer-envjs (npm)
- Dec 3, 2025
Malware in buffer-envjs
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-cranberry-sleigh-853 (npm)
6 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-rooftop-giftbox-464 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-lanternlit-sled-571 (npm)
2 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-mistletoe-sparkler-211 (npm)
3 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-rooftop-stockpile-626 (npm)
15 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-merry-cookiejar-987 (npm)
6 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-sleighing-bow-514 (npm)
7 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-wintry-northstar-674 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-bright-cushion-246 (npm)
5 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-fuzzy-fir-973 (npm)
3 compromised versions
- Dec 3, 2025
Malicious code in elf-stats-evergreen-muffin-867 (npm)
4 compromised versions
- Dec 3, 2025
Malicious code in @testfei/hallo-word (npm)
4 compromised versions
- Dec 3, 2025
Malicious code in karemm5 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in karemm6 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in karemm7 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in karemm3 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in karem5 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in elf-stats-sparkly-hammer-880 (npm)
- Dec 3, 2025
Malicious code in elf-stats-snowdusted-wishlist-166 (npm)
- Dec 3, 2025
Malicious code in elf-stats-snowdusted-sparkler-261 (npm)
- Dec 3, 2025
Malicious code in elf-stats-silvered-ornament-756 (npm)
- Dec 3, 2025
Malicious code in elf-stats-cosy-stockpile-694 (npm)
- Dec 3, 2025
Malicious code in angular-trackjs (npm)
4 compromised versions
- Dec 3, 2025
Malicious code in @wb-drive/icons (npm)
1 compromised version
- Dec 3, 2025
Malicious code in @hand-talk/yotta-icons (npm)
1 compromised version
- Dec 3, 2025
Malicious code in karemm2 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in karemm1 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in karem10 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in karem7 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in karem4 (npm)
1 compromised version
Page 229 of 4,807