Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,372 total in npm · sorted newest first- Nov 24, 2025
Malware in @viapip/eslint-config
1 compromised version
- Nov 24, 2025
Malicious code in @trpc-rate-limiter/hono (npm)
1 compromised version
- Nov 24, 2025
Malware in @trpc-rate-limiter/hono
1 compromised version
- Nov 24, 2025
Malicious code in @trpc-rate-limiter/cloudflare (npm)
1 compromised version
- Nov 24, 2025
Malware in @trpc-rate-limiter/cloudflare
1 compromised version
- Nov 24, 2025
Malicious code in @trackstar/test-package (npm)
1 compromised version
- Nov 24, 2025
Malware in @trackstar/test-package
1 compromised version
- Nov 24, 2025
Malicious code in @trackstar/test-angular-package (npm)
1 compromised version
- Nov 24, 2025
Malware in @trackstar/test-angular-package
1 compromised version
- Nov 24, 2025
Malicious code in @trackstar/react-trackstar-link-upgrade (npm)
1 compromised version
- Nov 24, 2025
Malware in @trackstar/react-trackstar-link-upgrade
1 compromised version
- Nov 24, 2025
Malicious code in @trackstar/react-trackstar-link (npm)
1 compromised version
- Nov 24, 2025
Malware in @trackstar/react-trackstar-link
1 compromised version
- Nov 24, 2025
Malicious code in @trackstar/angular-trackstar-link (npm)
1 compromised version
- Nov 24, 2025
Malware in @trackstar/angular-trackstar-link
1 compromised version
- Nov 24, 2025
Malicious code in @sme-ui/aoma-vevasound-metadata-lib (npm)
1 compromised version
- Nov 24, 2025
Malware in @sme-ui/aoma-vevasound-metadata-lib
1 compromised version
- Nov 24, 2025
Malicious code in @silgi/permission (npm)
1 compromised version
- Nov 24, 2025
Malware in @silgi/permission
1 compromised version
- Nov 24, 2025
Malicious code in @silgi/openapi (npm)
1 compromised version
- Nov 24, 2025
Malware in @silgi/openapi
1 compromised version
- Nov 24, 2025
Malicious code in @silgi/module-builder (npm)
1 compromised version
- Nov 24, 2025
Malware in @silgi/module-builder
1 compromised version
- Nov 24, 2025
Malicious code in @silgi/graphql (npm)
1 compromised version
- Nov 24, 2025
Malware in @silgi/graphql
1 compromised version
- Nov 24, 2025
Malicious code in @silgi/ecosystem (npm)
1 compromised version
- Nov 24, 2025
Malware in @silgi/ecosystem
1 compromised version
- Nov 24, 2025
Malicious code in rediff-viewer (npm)
1 compromised version
- Nov 24, 2025
Malware in rediff-viewer
1 compromised version
- Nov 24, 2025
Malicious code in @silgi/drizzle (npm)
1 compromised version
- Nov 24, 2025
Malware in @silgi/drizzle
1 compromised version
- Nov 24, 2025
Malicious code in @silgi/better-auth (npm)
1 compromised version
- Nov 24, 2025
Malware in @silgi/better-auth
1 compromised version
- Nov 24, 2025
Malicious code in rediff (npm)
1 compromised version
- Nov 24, 2025
Malware in rediff
1 compromised version
- Nov 24, 2025
Malicious code in @sameepsi/sor2 (npm)
1 compromised version
- Nov 24, 2025
Malware in @sameepsi/sor2
1 compromised version
- Nov 24, 2025
Malicious code in @sameepsi/sor (npm)
2 compromised versions
- Nov 24, 2025
Malware in @sameepsi/sor
1 compromised version
- Nov 24, 2025
Malicious code in react-scrambled-text (npm)
2 compromised versions
- Nov 24, 2025
Malware in react-scrambled-text
1 compromised version
- Nov 24, 2025
Malicious code in @quick-start-soft/quick-remove-image-background (npm)
1 compromised version
- Nov 24, 2025
Malware in @quick-start-soft/quick-remove-image-background
1 compromised version
- Nov 24, 2025
Malicious code in @quick-start-soft/quick-markdown-translator (npm)
1 compromised version
- Nov 24, 2025
Malware in @quick-start-soft/quick-markdown-translator
1 compromised version
- Nov 24, 2025
Malicious code in react-packery-component (npm)
1 compromised version
- Nov 24, 2025
Malware in react-packery-component
1 compromised version
- Nov 24, 2025
Malware in @quick-start-soft/quick-markdown-print
1 compromised version
- Nov 24, 2025
Malicious code in @posthog/rrweb-replay (npm)
1 compromised version
- Nov 24, 2025
Malware in @posthog/rrweb-replay
1 compromised version
Page 243 of 4,808