Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,422 total in npm · sorted newest first- Nov 24, 2025
Malware in capacitor-plugin-apptrackingios
1 compromised version
- Nov 24, 2025
Malicious code in @markvivanco/app-version-checker (npm)
2 compromised versions
- Nov 24, 2025
Malware in @markvivanco/app-version-checker
1 compromised version
- Nov 24, 2025
Malicious code in asyncapi-preview (npm)
2 compromised versions
- Nov 24, 2025
Malware in asyncapi-preview
1 compromised version
- Nov 24, 2025
Malicious code in bytecode-checker-cli (npm)
4 compromised versions
- Nov 24, 2025
Malware in bytecode-checker-cli
1 compromised version
- Nov 24, 2025
Malicious code in @actbase/react-native-devtools (npm)
1 compromised version
- Nov 24, 2025
Malware in @actbase/react-native-devtools
1 compromised version
- Nov 24, 2025
Malicious code in @actbase/react-absolute (npm)
1 compromised version
- Nov 24, 2025
Malware in @actbase/react-absolute
1 compromised version
- Nov 24, 2025
Malicious code in @actbase/react-kakaosdk (npm)
1 compromised version
- Nov 24, 2025
Malware in @actbase/react-kakaosdk
1 compromised version
- Nov 24, 2025
Malicious code in medusa-plugin-momo (npm)
1 compromised version
- Nov 24, 2025
Malware in medusa-plugin-momo
1 compromised version
- Nov 24, 2025
Malicious code in scgs-capacitor-subscribe (npm)
1 compromised version
- Nov 24, 2025
Malware in scgs-capacitor-subscribe
1 compromised version
- Nov 24, 2025
Malicious code in github-action-for-generator (npm)
2 compromised versions
- Nov 24, 2025
Malware in github-action-for-generator
1 compromised version
- Nov 24, 2025
Malicious code in @strapbuild/react-native-date-time-picker (npm)
1 compromised version
- Nov 24, 2025
Malware in @strapbuild/react-native-date-time-picker
1 compromised version
- Nov 24, 2025
Malicious code in gate-evm-check-code2 (npm)
4 compromised versions
- Nov 24, 2025
Malware in gate-evm-check-code2
1 compromised version
- Nov 24, 2025
Malware in @quick-start-soft/quick-markdown-image
1 compromised version
- Nov 24, 2025
Malicious code in @quick-start-soft/quick-document-translator (npm)
1 compromised version
- Nov 24, 2025
Malware in @quick-start-soft/quick-document-translator
1 compromised version
- Nov 24, 2025
Malicious code in lite-serper-mcp-server (npm)
1 compromised version
- Nov 24, 2025
Malware in lite-serper-mcp-server
1 compromised version
- Nov 24, 2025
Malicious code in @asyncapi/php-template (npm)
2 compromised versions
- Nov 24, 2025
Malicious code in @asyncapi/edavisualiser (npm)
2 compromised versions
- Nov 24, 2025
Malware in @asyncapi/php-template
1 compromised version
- Nov 24, 2025
Malware in @asyncapi/edavisualiser
1 compromised version
- Nov 24, 2025
Malicious code in esbuild-plugin-eta (npm)
1 compromised version
- Nov 24, 2025
Malware in esbuild-plugin-eta
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/server-analytics (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/server-analytics
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/react-ens-address (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/react-ens-address
1 compromised version
- Nov 24, 2025
Malicious code in zuper-stream (npm)
1 compromised version
- Nov 24, 2025
Malware in zuper-stream
1 compromised version
- Nov 24, 2025
Malicious code in @quick-start-soft/quick-markdown-compose (npm)
1 compromised version
- Nov 24, 2025
Malware in @quick-start-soft/quick-markdown-compose
1 compromised version
- Nov 24, 2025
Malicious code in @actbase/react-native-kakao-channel (npm)
1 compromised version
- Nov 24, 2025
Malware in @actbase/react-native-kakao-channel
1 compromised version
- Nov 24, 2025
Malicious code in @asyncapi/dotnet-rabbitmq-template (npm)
2 compromised versions
- Nov 24, 2025
Malware in @asyncapi/dotnet-rabbitmq-template
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/subdomain-registrar (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/subdomain-registrar
1 compromised version
- Nov 24, 2025
Malicious code in claude-token-updater (npm)
1 compromised version
- Nov 24, 2025
Malware in claude-token-updater
1 compromised version
Page 256 of 4,809