Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,347 total in npm · sorted newest first- Dec 2, 2025
Malware in tailwind-scrollbar-variant
1 compromised version
- Dec 2, 2025
Malicious code in wfui-test-e2e (npm)
1 compromised version
- Dec 2, 2025
Malicious code in stream-xor-chain (npm)
- Dec 2, 2025
Malware in stream-xor-chain
1 compromised version
- Dec 2, 2025
Malicious code in @shr3k/tdspt-helper-ng (npm)
1 compromised version
- Dec 2, 2025
Malware in @shr3k/tdspt-helper-ng
1 compromised version
- Dec 2, 2025
Malicious code in @shr3k/tdspt-helper (npm)
6 compromised versions
- Dec 2, 2025
Malware in @shr3k/tdspt-helper
1 compromised version
- Dec 2, 2025
Malicious code in tdspt-helper (npm)
6 compromised versions
- Dec 2, 2025
Malware in tdspt-helper
1 compromised version
- Dec 2, 2025
Malicious code in nodenetbanxsdk (npm)
1 compromised version
- Dec 2, 2025
Malware in nodenetbanxsdk
1 compromised version
- Dec 2, 2025
Malicious code in bignumx (npm)
1 compromised version
- Dec 2, 2025
Malware in bignumx
1 compromised version
- Dec 2, 2025
Malicious code in @wxi-dev/serverless-tsc-config (npm)
6 compromised versions
- Dec 2, 2025
Malware in @wxi-dev/serverless-tsc-config
1 compromised version
- Dec 2, 2025
Malicious code in cyber-fca (npm)
6 compromised versions
- Dec 2, 2025
Malware in cyber-fca
1 compromised version
- Dec 1, 2025
Malicious code in yq-go (npm)
- Dec 1, 2025
Malicious code in usb_dev (npm)
- Dec 1, 2025
Malicious code in tilt-ui (npm)
- Dec 1, 2025
Malicious code in terrain-sample (npm)
- Dec 1, 2025
Malicious code in telesis (npm)
- Dec 1, 2025
Malicious code in solana-dev-mcp (npm)
- Dec 1, 2025
Malicious code in silentcipherui (npm)
- Dec 1, 2025
Malicious code in ripiocoin (npm)
- Dec 1, 2025
Malicious code in render-stage (npm)
- Dec 1, 2025
Malicious code in privy-frames-v2-demo (npm)
- Dec 1, 2025
Malicious code in privy-farcaster-demo (npm)
- Dec 1, 2025
Malicious code in nova-angular-project (npm)
- Dec 1, 2025
Malicious code in nnc-web (npm)
- Dec 1, 2025
Malicious code in mongodb-stitch-server-testutils (npm)
- Dec 1, 2025
Malicious code in mongodb-compass (npm)
- Dec 1, 2025
Malicious code in mongodb-atlas-cli-toc-generator (npm)
- Dec 1, 2025
Malicious code in markdownlint-cli2-action (npm)
- Dec 1, 2025
Malicious code in leafygreen-docs (npm)
- Dec 1, 2025
Malicious code in kubernetes-helm (npm)
- Dec 1, 2025
Malicious code in kubernetes-controller-tools (npm)
- Dec 1, 2025
Malicious code in kubebuilder (npm)
- Dec 1, 2025
Malicious code in iife-sample (npm)
- Dec 1, 2025
Malicious code in hpi-porsche-app (npm)
- Dec 1, 2025
Malicious code in debug-common (npm)
- Dec 1, 2025
Malicious code in dataset-view (npm)
- Dec 1, 2025
Malicious code in b3dtiles-sample (npm)
- Dec 1, 2025
Malicious code in animation-debug-app (npm)
- Dec 1, 2025
Malicious code in angular-promql (npm)
- Dec 1, 2025
Malicious code in testhaus (npm)
1 compromised version
- Dec 1, 2025
Malicious code in start-internal (npm)
2 compromised versions
- Dec 1, 2025
Malicious code in pluxee-design-system (npm)
- Dec 1, 2025
Malicious code in old-hd-keyring (npm)
Page 231 of 4,807