Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,347 total in npm · sorted newest first- Dec 3, 2025
Malicious code in karem1 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in kkkaremn (npm)
3 compromised versions
- Dec 3, 2025
Malicious code in karemz (npm)
1 compromised version
- Dec 3, 2025
Malicious code in kmz1 (npm)
1 compromised version
- Dec 3, 2025
Malicious code in kwp-router (npm)
2 compromised versions
- Dec 3, 2025
Malware in kwp-router
1 compromised version
- Dec 3, 2025
Malicious code in kkkarem (npm)
1 compromised version
- Dec 2, 2025
Malicious code in wfui-dbd-react-ui (npm)
1 compromised version
- Dec 2, 2025
Malicious code in wfui-dsm-react-ui (npm)
1 compromised version
- Dec 2, 2025
Malware in eslint-plugin-unicorn-ts-2
1 compromised version
- Dec 2, 2025
Malware in br2s-ui-componentlibrary_r2
1 compromised version
- Dec 2, 2025
Malware in umap-wasm
1 compromised version
- Dec 2, 2025
Malware in old-hd-keyring
1 compromised version
- Dec 2, 2025
Malware in vitest-environment-jsdom-patched
1 compromised version
- Dec 2, 2025
Malware in 7715-permissions-shared
1 compromised version
- Dec 2, 2025
Malware in liblynxtextra.so
1 compromised version
- Dec 2, 2025
Malware in m365-action-sdk
1 compromised version
- Dec 2, 2025
Malware in x402-legacy
1 compromised version
- Dec 2, 2025
Malware in babel-plugin-standalone
1 compromised version
- Dec 2, 2025
Malware in eslint-plugin-react-hooks-published
1 compromised version
- Dec 2, 2025
Malware in libdebugrouter.so
1 compromised version
- Dec 2, 2025
Malicious code in data-xabit (npm)
- Dec 2, 2025
Malicious code in codemirror-5 (npm)
- Dec 2, 2025
Malicious code in btc-transaction-helper (npm)
- Dec 2, 2025
Malware in chia-gaming-lobby-connection
1 compromised version
- Dec 2, 2025
Malware in btc-transaction-helper
1 compromised version
- Dec 2, 2025
Malware in com.unity.sharp-zip-lib
1 compromised version
- Dec 2, 2025
Malware in data-xabit
1 compromised version
- Dec 2, 2025
Malware in codemirror-5
1 compromised version
- Dec 2, 2025
Malware in chain-selectors
1 compromised version
- Dec 2, 2025
Malicious code in chai-status (npm)
1 compromised version
- Dec 2, 2025
Malware in chai-status
1 compromised version
- Dec 2, 2025
Malicious code in ui-cluster-driver-otccce (npm)
- Dec 2, 2025
Malware in ui-cluster-driver-otccce
1 compromised version
- Dec 2, 2025
Malicious code in internallib_v881 (npm)
- Dec 2, 2025
Malware in internallib_v881
1 compromised version
- Dec 2, 2025
Malicious code in ddos-l7 (npm)
- Dec 2, 2025
Malware in ddos-l7
1 compromised version
- Dec 2, 2025
Malicious code in react-animated-glow (npm)
- Dec 2, 2025
Malware in react-animated-glow
1 compromised version
- Dec 2, 2025
Malware in @kiwiiw/ez-lib
1 compromised version
- Dec 2, 2025
Malicious code in multer-cli (npm)
- Dec 2, 2025
Malware in multer-cli
1 compromised version
- Dec 2, 2025
Malicious code in tensorfi-secure-hash (npm)
- Dec 2, 2025
Malicious code in solana-dexfi-suite (npm)
- Dec 2, 2025
Malware in tensorfi-secure-hash
1 compromised version
- Dec 2, 2025
Malware in solana-dexfi-suite
1 compromised version
- Dec 2, 2025
Malicious code in tailwind-scrollbar-variant (npm)
- Dec 2, 2025
Malicious code in tailwind-scrollbar-plugin (npm)
- Dec 2, 2025
Malware in tailwind-scrollbar-plugin
1 compromised version
Page 230 of 4,807