Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,408 total in npm · sorted newest first- Nov 24, 2025
Malicious code in formik-error-focus (npm)
1 compromised version
- Nov 24, 2025
Malware in formik-error-focus
1 compromised version
- Nov 24, 2025
Malicious code in gitsafe (npm)
1 compromised version
- Nov 24, 2025
Malware in gitsafe
1 compromised version
- Nov 24, 2025
Malicious code in flatten-unflatten (npm)
2 compromised versions
- Nov 24, 2025
Malware in flatten-unflatten
1 compromised version
- Nov 24, 2025
Malicious code in gulp-inject-envs (npm)
2 compromised versions
- Nov 24, 2025
Malware in gulp-inject-envs
1 compromised version
- Nov 24, 2025
Malicious code in flapstacks (npm)
2 compromised versions
- Nov 24, 2025
Malware in flapstacks
1 compromised version
- Nov 24, 2025
Malicious code in medusa-plugin-logs (npm)
1 compromised version
- Nov 24, 2025
Malware in medusa-plugin-logs
1 compromised version
- Nov 24, 2025
Malicious code in fittxt (npm)
2 compromised versions
- Nov 24, 2025
Malware in fittxt
1 compromised version
- Nov 24, 2025
Malicious code in jquery-bindings (npm)
2 compromised versions
- Nov 24, 2025
Malware in jquery-bindings
1 compromised version
- Nov 24, 2025
Malicious code in firestore-search-engine (npm)
1 compromised version
- Nov 24, 2025
Malware in firestore-search-engine
1 compromised version
- Nov 24, 2025
Malicious code in kill-port (npm)
2 compromised versions
- Nov 24, 2025
Malware in kill-port
1 compromised version
- Nov 24, 2025
Malicious code in feature-flip (npm)
2 compromised versions
- Nov 24, 2025
Malware in feature-flip
1 compromised version
- Nov 24, 2025
Malicious code in kwami (npm)
2 compromised versions
- Nov 24, 2025
Malware in kwami
1 compromised version
- Nov 24, 2025
Malicious code in fat-fingered (npm)
2 compromised versions
- Nov 24, 2025
Malware in fat-fingered
1 compromised version
- Nov 24, 2025
Malicious code in okta-react-router-6 (npm)
1 compromised version
- Nov 24, 2025
Malware in okta-react-router-6
1 compromised version
- Nov 24, 2025
Malicious code in lang-codes (npm)
2 compromised versions
- Nov 24, 2025
Malware in lang-codes
1 compromised version
- Nov 24, 2025
Malicious code in obj-to-css (npm)
2 compromised versions
- Nov 24, 2025
Malware in obj-to-css
1 compromised version
- Nov 24, 2025
Malicious code in license-o-matic (npm)
2 compromised versions
- Nov 24, 2025
Malware in license-o-matic
1 compromised version
- Nov 24, 2025
Malicious code in wenk (npm)
2 compromised versions
- Nov 24, 2025
Malware in wenk
1 compromised version
- Nov 24, 2025
Malicious code in normal-store (npm)
4 compromised versions
- Nov 24, 2025
Malware in normal-store
1 compromised version
- Nov 24, 2025
Malicious code in ngx-wooapi (npm)
1 compromised version
- Nov 24, 2025
Malware in ngx-wooapi
1 compromised version
- Nov 24, 2025
Malicious code in lint-staged-imagemin (npm)
2 compromised versions
- Nov 24, 2025
Malware in lint-staged-imagemin
1 compromised version
- Nov 24, 2025
Malicious code in zuper-sdk (npm)
1 compromised version
- Nov 24, 2025
Malware in zuper-sdk
1 compromised version
- Nov 24, 2025
Malicious code in ngx-useful-swiper-prosenjit (npm)
1 compromised version
- Nov 24, 2025
Malware in ngx-useful-swiper-prosenjit
1 compromised version
- Nov 24, 2025
Malicious code in luno-api (npm)
1 compromised version
- Nov 24, 2025
Malware in luno-api
1 compromised version
- Nov 24, 2025
Malicious code in piclite (npm)
1 compromised version
- Nov 24, 2025
Malware in piclite
1 compromised version
Page 249 of 4,809