Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,408 total in npm · sorted newest first- Nov 24, 2025
Malicious code in expressos (npm)
1 compromised version
- Nov 24, 2025
Malware in expressos
1 compromised version
- Nov 24, 2025
Malicious code in eslint-config-nitpicky (npm)
1 compromised version
- Nov 24, 2025
Malware in eslint-config-nitpicky
1 compromised version
- Nov 24, 2025
Malicious code in enforce-branch-name (npm)
1 compromised version
- Nov 24, 2025
Malware in enforce-branch-name
1 compromised version
- Nov 24, 2025
Malicious code in email-deliverability-tester (npm)
1 compromised version
- Nov 24, 2025
Malware in email-deliverability-tester
1 compromised version
- Nov 24, 2025
Malicious code in dont-go (npm)
1 compromised version
- Nov 24, 2025
Malware in dont-go
1 compromised version
- Nov 24, 2025
Malicious code in docusaurus-plugin-vanilla-extract (npm)
1 compromised version
- Nov 24, 2025
Malware in docusaurus-plugin-vanilla-extract
1 compromised version
- Nov 24, 2025
Malicious code in designstudiouiux (npm)
1 compromised version
- Nov 24, 2025
Malware in designstudiouiux
1 compromised version
- Nov 24, 2025
Malicious code in dashboard-empty-state (npm)
1 compromised version
- Nov 24, 2025
Malware in dashboard-empty-state
1 compromised version
- Nov 24, 2025
Malicious code in css-dedoupe (npm)
1 compromised version
- Nov 24, 2025
Malware in css-dedoupe
1 compromised version
- Nov 24, 2025
Malicious code in count-it-down (npm)
2 compromised versions
- Nov 24, 2025
Malware in count-it-down
1 compromised version
- Nov 24, 2025
Malicious code in composite-reducer (npm)
4 compromised versions
- Nov 24, 2025
Malware in composite-reducer
1 compromised version
- Nov 24, 2025
Malicious code in compare-obj (npm)
2 compromised versions
- Nov 24, 2025
Malware in compare-obj
1 compromised version
- Nov 24, 2025
Malicious code in colors-regex (npm)
1 compromised version
- Nov 24, 2025
Malware in colors-regex
1 compromised version
- Nov 24, 2025
Malicious code in coinmarketcap-api (npm)
2 compromised versions
- Nov 24, 2025
Malware in coinmarketcap-api
1 compromised version
- Nov 24, 2025
Malicious code in sa-company-registration-number-regex (npm)
2 compromised versions
- Nov 24, 2025
Malware in sa-company-registration-number-regex
1 compromised version
- Nov 24, 2025
Malicious code in sa-id-gen (npm)
2 compromised versions
- Nov 24, 2025
Malware in sa-id-gen
1 compromised version
- Nov 24, 2025
Malicious code in set-nested-prop (npm)
2 compromised versions
- Nov 24, 2025
Malware in set-nested-prop
1 compromised version
- Nov 24, 2025
Malicious code in sort-by-distance (npm)
1 compromised version
- Nov 24, 2025
Malware in sort-by-distance
1 compromised version
- Nov 24, 2025
Malicious code in south-african-id-info (npm)
1 compromised version
- Nov 24, 2025
Malware in south-african-id-info
1 compromised version
- Nov 24, 2025
Malicious code in stat-fns (npm)
1 compromised version
- Nov 24, 2025
Malware in stat-fns
1 compromised version
- Nov 24, 2025
Malicious code in stoor (npm)
1 compromised version
- Nov 24, 2025
Malware in stoor
1 compromised version
- Nov 24, 2025
Malicious code in super-commit (npm)
1 compromised version
- Nov 24, 2025
Malware in super-commit
1 compromised version
- Nov 24, 2025
Malicious code in svelte-autocomplete-select (npm)
1 compromised version
- Nov 24, 2025
Malware in svelte-autocomplete-select
1 compromised version
- Nov 24, 2025
Malicious code in svelte-toasty (npm)
2 compromised versions
- Nov 24, 2025
Malware in svelte-toasty
1 compromised version
- Nov 24, 2025
Malicious code in tanstack-shadcn-table (npm)
1 compromised version
- Nov 24, 2025
Malware in tanstack-shadcn-table
1 compromised version
Page 252 of 4,809