Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,408 total in npm · sorted newest first- Nov 24, 2025
Malicious code in bidirectional-adapter (npm)
4 compromised versions
- Nov 24, 2025
Malware in bidirectional-adapter
1 compromised version
- Nov 24, 2025
Malicious code in automation_model (npm)
3 compromised versions
- Nov 24, 2025
Malware in automation_model
1 compromised version
- Nov 24, 2025
Malicious code in avvvatars-vue (npm)
1 compromised version
- Nov 24, 2025
Malware in avvvatars-vue
1 compromised version
- Nov 24, 2025
Malicious code in arc-cli-fc (npm)
1 compromised version
- Nov 24, 2025
Malware in arc-cli-fc
1 compromised version
- Nov 24, 2025
Malicious code in web-types-htmx (npm)
1 compromised version
- Nov 24, 2025
Malware in web-types-htmx
1 compromised version
- Nov 24, 2025
Malicious code in ai-crowl-shield (npm)
1 compromised version
- Nov 24, 2025
Malware in ai-crowl-shield
1 compromised version
- Nov 24, 2025
Malicious code in webpack-loader-httpfile (npm)
1 compromised version
- Nov 24, 2025
Malware in webpack-loader-httpfile
1 compromised version
- Nov 24, 2025
Malicious code in 02-echo (npm)
1 compromised version
- Nov 24, 2025
Malware in 02-echo
1 compromised version
- Nov 24, 2025
Malicious code in wallet-type (npm)
2 compromised versions
- Nov 24, 2025
Malware in wallet-type
1 compromised version
- Nov 24, 2025
Malicious code in @varsityvibe/validation-schemas (npm)
2 compromised versions
- Nov 24, 2025
Malware in @varsityvibe/validation-schemas
1 compromised version
- Nov 24, 2025
Malicious code in wallet-evm (npm)
2 compromised versions
- Nov 24, 2025
Malware in wallet-evm
1 compromised version
- Nov 24, 2025
Malicious code in @varsityvibe/utils (npm)
1 compromised version
- Nov 24, 2025
Malware in @varsityvibe/utils
1 compromised version
- Nov 24, 2025
Malicious code in @varsityvibe/api-client (npm)
2 compromised versions
- Nov 24, 2025
Malware in @varsityvibe/api-client
1 compromised version
- Nov 24, 2025
Malicious code in victoriaxoaquyet-wallet-core (npm)
2 compromised versions
- Nov 24, 2025
Malware in victoriaxoaquyet-wallet-core
1 compromised version
- Nov 24, 2025
Malicious code in victoria-wallet-validator (npm)
2 compromised versions
- Nov 24, 2025
Malware in victoria-wallet-validator
1 compromised version
- Nov 24, 2025
Malicious code in victoria-wallet-utils (npm)
2 compromised versions
- Nov 24, 2025
Malware in victoria-wallet-utils
1 compromised version
- Nov 24, 2025
Malicious code in victoria-wallet-type (npm)
2 compromised versions
- Nov 24, 2025
Malware in victoria-wallet-type
1 compromised version
- Nov 24, 2025
Malicious code in generator-meteor-stock (npm)
1 compromised version
- Nov 24, 2025
Malware in generator-meteor-stock
1 compromised version
- Nov 24, 2025
Malicious code in gatsby-plugin-cname (npm)
2 compromised versions
- Nov 24, 2025
Malware in gatsby-plugin-cname
1 compromised version
- Nov 24, 2025
Malicious code in victoria-wallet-core (npm)
2 compromised versions
- Nov 24, 2025
Malware in victoria-wallet-core
1 compromised version
- Nov 24, 2025
Malicious code in generator-ng-itobuz (npm)
1 compromised version
- Nov 24, 2025
Malware in generator-ng-itobuz
1 compromised version
- Nov 24, 2025
Malicious code in victoria-wallet-constants (npm)
2 compromised versions
- Nov 24, 2025
Malware in victoria-wallet-constants
1 compromised version
- Nov 24, 2025
Malicious code in fuzzy-finder (npm)
2 compromised versions
- Nov 24, 2025
Malware in fuzzy-finder
1 compromised version
- Nov 24, 2025
Malicious code in get-them-args (npm)
1 compromised version
- Nov 24, 2025
Malware in get-them-args
1 compromised version
- Nov 24, 2025
Malicious code in formik-store (npm)
1 compromised version
- Nov 24, 2025
Malware in formik-store
1 compromised version
Page 248 of 4,809