Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,408 total in npm · sorted newest first- Nov 24, 2025
Malicious code in @mparpaillon/imagesloaded (npm)
1 compromised version
- Nov 24, 2025
Malicious code in @mparpaillon/connector-parse (npm)
1 compromised version
- Nov 24, 2025
Malicious code in @mcp-use/mcp-use (npm)
2 compromised versions
- Nov 24, 2025
Malicious code in @mcp-use/inspector (npm)
2 compromised versions
- Nov 24, 2025
Malicious code in @mcp-use/cli (npm)
2 compromised versions
- Nov 24, 2025
Malicious code in @ensdomains/buffer (npm)
2 compromised versions
- Nov 24, 2025
Malicious code in @tezign/html-webpack-plugin (npm)
- Nov 24, 2025
Malicious code in @sauravthakur/corplib (npm)
- Nov 24, 2025
Malicious code in @darwinex/react-custom-scrollbars (npm)
- Nov 24, 2025
Malicious code in @asyncapi/studio (npm)
4 compromised versions
- Nov 24, 2025
Malware in @asyncapi/studio
1 compromised version
- Nov 24, 2025
Malicious code in ra-data-firebase (npm)
2 compromised versions
- Nov 24, 2025
Malware in ra-data-firebase
1 compromised version
- Nov 24, 2025
Malicious code in rollup-plugin-httpfile (npm)
1 compromised version
- Nov 24, 2025
Malware in rollup-plugin-httpfile
1 compromised version
- Nov 24, 2025
Malicious code in @caretive/caret-cli (npm)
1 compromised version
- Nov 24, 2025
Malware in @caretive/caret-cli
1 compromised version
- Nov 24, 2025
Malicious code in poper-react-sdk (npm)
1 compromised version
- Nov 24, 2025
Malware in poper-react-sdk
1 compromised version
- Nov 24, 2025
Malicious code in react-native-worklet-functions (npm)
1 compromised version
- Nov 24, 2025
Malware in react-native-worklet-functions
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/web3modal (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/web3modal
1 compromised version
- Nov 24, 2025
Malicious code in n8n-nodes-tmdb (npm)
1 compromised version
- Nov 24, 2025
Malware in n8n-nodes-tmdb
1 compromised version
- Nov 24, 2025
Malicious code in orbit-boxicons (npm)
1 compromised version
- Nov 24, 2025
Malware in orbit-boxicons
1 compromised version
- Nov 24, 2025
Malicious code in gate-evm-tools-test (npm)
4 compromised versions
- Nov 24, 2025
Malware in gate-evm-tools-test
1 compromised version
- Nov 24, 2025
Malicious code in @louisle2/cortex-js (npm)
1 compromised version
- Nov 24, 2025
Malware in @louisle2/cortex-js
1 compromised version
- Nov 24, 2025
Malicious code in capacitor-plugin-purchase (npm)
1 compromised version
- Nov 24, 2025
Malware in capacitor-plugin-purchase
1 compromised version
- Nov 24, 2025
Malicious code in expo-audio-session (npm)
1 compromised version
- Nov 24, 2025
Malware in expo-audio-session
1 compromised version
- Nov 24, 2025
Malicious code in capacitor-plugin-apptrackingios (npm)
1 compromised version
- Nov 24, 2025
Malware in capacitor-plugin-apptrackingios
1 compromised version
- Nov 24, 2025
Malicious code in @markvivanco/app-version-checker (npm)
2 compromised versions
- Nov 24, 2025
Malware in @markvivanco/app-version-checker
1 compromised version
- Nov 24, 2025
Malicious code in asyncapi-preview (npm)
2 compromised versions
- Nov 24, 2025
Malware in asyncapi-preview
1 compromised version
- Nov 24, 2025
Malicious code in bytecode-checker-cli (npm)
4 compromised versions
- Nov 24, 2025
Malware in bytecode-checker-cli
1 compromised version
- Nov 24, 2025
Malicious code in @actbase/react-native-devtools (npm)
1 compromised version
- Nov 24, 2025
Malware in @actbase/react-native-devtools
1 compromised version
- Nov 24, 2025
Malicious code in @actbase/react-absolute (npm)
1 compromised version
- Nov 24, 2025
Malware in @actbase/react-absolute
1 compromised version
- Nov 24, 2025
Malicious code in @actbase/react-kakaosdk (npm)
1 compromised version
- Nov 24, 2025
Malware in @actbase/react-kakaosdk
1 compromised version
- Nov 24, 2025
Malicious code in medusa-plugin-momo (npm)
1 compromised version
Page 255 of 4,809