Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,347 total in npm · sorted newest first- Dec 1, 2025
Malware in quickswap-ads-list
1 compromised version
- Dec 1, 2025
Malicious code in @ukg-oneapp/common-lib (npm)
1 compromised version
- Dec 1, 2025
Malicious code in @gr-exports/head (npm)
2 compromised versions
- Dec 1, 2025
Malicious code in @gr-exports/body (npm)
2 compromised versions
- Dec 1, 2025
Malicious code in @gr-exports/async (npm)
2 compromised versions
- Dec 1, 2025
Malicious code in @gr-common/async (npm)
2 compromised versions
- Dec 1, 2025
Malware in @voiceflow/utils-designer
1 compromised version
- Nov 30, 2025
Malicious code in 7715-permissions-shared (npm)
1 compromised version
- Nov 30, 2025
Malicious code in umap-wasm (npm)
1 compromised version
- Nov 30, 2025
Malicious code in babel-plugin-standalone (npm)
3 compromised versions
- Nov 29, 2025
Malicious code in wds-icons (npm)
1 compromised version
- Nov 29, 2025
Malicious code in com.unity.sharp-zip-lib (npm)
1 compromised version
- Nov 29, 2025
Malicious code in liblynxtextra.so (npm)
4 compromised versions
- Nov 29, 2025
Malicious code in eslint-plugin-react-hooks-published (npm)
2 compromised versions
- Nov 29, 2025
Malicious code in chain-selectors (npm)
3 compromised versions
- Nov 29, 2025
Malicious code in vitest-environment-jsdom-patched (npm)
1 compromised version
- Nov 29, 2025
Malicious code in x402-legacy (npm)
2 compromised versions
- Nov 28, 2025
Malicious code in browser-client-neptune (npm)
3 compromised versions
- Nov 28, 2025
Malware in capacitor-voice-recorder-wav
1 compromised version
- Nov 28, 2025
Malware in my-saeed-lib
1 compromised version
- Nov 28, 2025
Malware in pkg-readme
1 compromised version
- Nov 27, 2025
Malicious code in accounts-base (npm)
1 compromised version
- Nov 27, 2025
Malware in web-types-lit
1 compromised version
- Nov 27, 2025
Malicious code in wartsila-application-json (npm)
1 compromised version
- Nov 27, 2025
Malicious code in chia-gaming-lobby-connection (npm)
2 compromised versions
- Nov 27, 2025
Malware in @mizzle-dev/orm
1 compromised version
- Nov 27, 2025
Malicious code in bitcoin-lib-js (npm)
- Nov 27, 2025
Malware in bip40
1 compromised version
- Nov 27, 2025
Malware in bitcoin-lib-js
1 compromised version
- Nov 27, 2025
Malware in bitcoin-main-lib
1 compromised version
- Nov 26, 2025
Malicious code in bitcoin-main-lib (npm)
7 compromised versions
- Nov 26, 2025
Malicious code in br2s-ui-componentlibrary_r2 (npm)
1 compromised version
- Nov 26, 2025
Malicious code in vite-dynachunk (npm)
1 compromised version
- Nov 26, 2025
Malware in vite-dynachunk
1 compromised version
- Nov 26, 2025
Malicious code in chai-jsons (npm)
- Nov 26, 2025
Malware in chai-jsons
1 compromised version
- Nov 26, 2025
Malicious code in chai-auth (npm)
1 compromised version
- Nov 26, 2025
Malware in chai-auth
1 compromised version
- Nov 26, 2025
Malicious code in ahmed_salem_t (npm)
- Nov 26, 2025
Malware in ahmed_salem_t
1 compromised version
- Nov 26, 2025
Malware in @browserbasehq/stagehand
1 compromised version
- Nov 26, 2025
Malicious code in @lokeswari-satyanarayanan/rn-zustand-expo-template (npm)
1 compromised version
- Nov 26, 2025
Malware in silgi
1 compromised version
- Nov 26, 2025
Malware in gatsby-plugin-antd
1 compromised version
- Nov 26, 2025
Malware in eslint-config-kinvey-flex-service
1 compromised version
- Nov 26, 2025
Malware in command-irail
1 compromised version
- Nov 26, 2025
Malware in ceviz
1 compromised version
- Nov 26, 2025
Malware in axios-cancelable
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/voiceflow-types
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/voice-types
1 compromised version
Page 233 of 4,807