Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,372 total in npm · sorted newest first- Nov 24, 2025
Malware in quickswap-default-staking-list
1 compromised version
- Nov 24, 2025
Malicious code in @jayeshsadhwani/telemetry-sdk (npm)
1 compromised version
- Nov 24, 2025
Malware in @jayeshsadhwani/telemetry-sdk
1 compromised version
- Nov 24, 2025
Malicious code in vue-browserupdate-nuxt (npm)
1 compromised version
- Nov 24, 2025
Malware in vue-browserupdate-nuxt
1 compromised version
- Nov 24, 2025
Malicious code in @ifings/metatron3 (npm)
1 compromised version
- Nov 24, 2025
Malware in @ifings/metatron3
1 compromised version
- Nov 24, 2025
Malicious code in @ifings/design-system (npm)
1 compromised version
- Nov 24, 2025
Malware in @ifings/design-system
1 compromised version
- Nov 24, 2025
Malicious code in valuedex-sdk (npm)
1 compromised version
- Nov 24, 2025
Malware in valuedex-sdk
1 compromised version
- Nov 24, 2025
Malicious code in uniswap-test-sdk-core (npm)
1 compromised version
- Nov 24, 2025
Malware in uniswap-test-sdk-core
1 compromised version
- Nov 24, 2025
Malicious code in @ifelsedeveloper/protocol-contracts-svm-idl (npm)
2 compromised versions
- Nov 24, 2025
Malware in @ifelsedeveloper/protocol-contracts-svm-idl
1 compromised version
- Nov 24, 2025
Malicious code in unsearch (npm)
1 compromised version
- Nov 24, 2025
Malware in unsearch
1 compromised version
- Nov 24, 2025
Malicious code in @hyperlook/telemetry-sdk (npm)
1 compromised version
- Nov 24, 2025
Malware in @hyperlook/telemetry-sdk
1 compromised version
- Nov 24, 2025
Malicious code in uniswap-smart-order-router (npm)
1 compromised version
- Nov 24, 2025
Malware in uniswap-smart-order-router
1 compromised version
- Nov 24, 2025
Malicious code in uniswap-router-sdk (npm)
1 compromised version
- Nov 24, 2025
Malware in uniswap-router-sdk
1 compromised version
- Nov 24, 2025
Malicious code in @huntersofbook/core (npm)
1 compromised version
- Nov 24, 2025
Malware in @huntersofbook/core
1 compromised version
- Nov 24, 2025
Malicious code in unemail (npm)
2 compromised versions
- Nov 24, 2025
Malware in unemail
1 compromised version
- Nov 24, 2025
Malicious code in @hover-design/react (npm)
1 compromised version
- Nov 24, 2025
Malware in @hover-design/react
1 compromised version
- Nov 24, 2025
Malicious code in @hover-design/core (npm)
1 compromised version
- Nov 24, 2025
Malware in @hover-design/core
1 compromised version
- Nov 24, 2025
Malicious code in unadapter (npm)
1 compromised version
- Nov 24, 2025
Malware in unadapter
1 compromised version
- Nov 24, 2025
Malicious code in @hapheus/n8n-nodes-pgp (npm)
1 compromised version
- Nov 24, 2025
Malware in @hapheus/n8n-nodes-pgp
1 compromised version
- Nov 24, 2025
Malicious code in revenuecat (npm)
1 compromised version
- Nov 24, 2025
Malware in revenuecat
1 compromised version
- Nov 24, 2025
Malicious code in samesame (npm)
1 compromised version
- Nov 24, 2025
Malware in samesame
1 compromised version
- Nov 24, 2025
Malicious code in schob (npm)
1 compromised version
- Nov 24, 2025
Malware in schob
1 compromised version
- Nov 24, 2025
Malicious code in @freeday-ai/webchat (npm)
4 compromised versions
- Nov 24, 2025
Malware in @freeday-ai/webchat
1 compromised version
- Nov 24, 2025
Malicious code in @flowfuse/flowfuse (npm)
1 compromised version
- Nov 24, 2025
Malware in @flowfuse/flowfuse
1 compromised version
- Nov 24, 2025
Malicious code in shell-exec (npm)
2 compromised versions
- Nov 24, 2025
Malware in shell-exec
1 compromised version
- Nov 24, 2025
Malicious code in @fishingbooker/react-swiper (npm)
1 compromised version
- Nov 24, 2025
Malware in @fishingbooker/react-swiper
1 compromised version
- Nov 24, 2025
Malicious code in simplejsonform (npm)
1 compromised version
Page 241 of 4,808