Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,422 total in npm · sorted newest first- Nov 24, 2025
Malicious code in evm-checkcode-cli (npm)
4 compromised versions
- Nov 24, 2025
Malware in evm-checkcode-cli
1 compromised version
- Nov 24, 2025
Malicious code in @trigo/atrix-pubsub (npm)
1 compromised version
- Nov 24, 2025
Malware in @trigo/atrix-pubsub
1 compromised version
- Nov 24, 2025
Malicious code in @trigo/hapi-auth-signedlink (npm)
1 compromised version
- Nov 24, 2025
Malware in @trigo/hapi-auth-signedlink
1 compromised version
- Nov 24, 2025
Malicious code in @strapbuild/react-native-perspective-image-cropper-poojan31 (npm)
1 compromised version
- Nov 24, 2025
Malware in @strapbuild/react-native-perspective-image-cropper-poojan31
1 compromised version
- Nov 24, 2025
Malicious code in axios-builder (npm)
1 compromised version
- Nov 24, 2025
Malware in axios-builder
1 compromised version
- Nov 24, 2025
Malicious code in calc-loan-interest (npm)
1 compromised version
- Nov 24, 2025
Malware in calc-loan-interest
1 compromised version
- Nov 24, 2025
Malicious code in medusa-plugin-announcement (npm)
1 compromised version
- Nov 24, 2025
Malware in medusa-plugin-announcement
1 compromised version
- Nov 24, 2025
Malicious code in open2internet (npm)
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/unruggable-gateways (npm)
1 compromised version
- Nov 24, 2025
Malware in open2internet
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/unruggable-gateways
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/cypress-metamask
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/renewal (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/renewal
1 compromised version
- Nov 24, 2025
Malicious code in @quick-start-soft/quick-markdown (npm)
1 compromised version
- Nov 24, 2025
Malware in @quick-start-soft/quick-markdown
1 compromised version
- Nov 24, 2025
Malicious code in cpu-instructions (npm)
1 compromised version
- Nov 24, 2025
Malware in cpu-instructions
1 compromised version
- Nov 24, 2025
Malicious code in orbit-soap (npm)
1 compromised version
- Nov 24, 2025
Malware in orbit-soap
1 compromised version
- Nov 24, 2025
Malicious code in @strapbuild/react-native-perspective-image-cropper-2 (npm)
1 compromised version
- Nov 24, 2025
Malware in @strapbuild/react-native-perspective-image-cropper-2
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/ui (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/ui
1 compromised version
- Nov 24, 2025
Malicious code in @actbase/react-native-actionsheet (npm)
1 compromised version
- Nov 24, 2025
Malware in @actbase/react-native-actionsheet
1 compromised version
- Nov 24, 2025
Malicious code in @quick-start-soft/quick-git-clean-markdown (npm)
1 compromised version
- Nov 24, 2025
Malware in @quick-start-soft/quick-git-clean-markdown
1 compromised version
- Nov 24, 2025
Malicious code in @actbase/react-native-simple-video (npm)
1 compromised version
- Nov 24, 2025
Malware in @actbase/react-native-simple-video
1 compromised version
- Nov 24, 2025
Malicious code in @actbase/react-native-kakao-navi (npm)
1 compromised version
- Nov 24, 2025
Malware in @actbase/react-native-kakao-navi
1 compromised version
- Nov 24, 2025
Malicious code in medusa-plugin-zalopay (npm)
1 compromised version
- Nov 24, 2025
Malware in medusa-plugin-zalopay
1 compromised version
- Nov 24, 2025
Malicious code in @quick-start-soft/quick-task-refine (npm)
1 compromised version
- Nov 24, 2025
Malware in @quick-start-soft/quick-task-refine
1 compromised version
- Nov 24, 2025
Malicious code in @kvytech/medusa-plugin-newsletter (npm)
1 compromised version
- Nov 24, 2025
Malware in @kvytech/medusa-plugin-newsletter
1 compromised version
- Nov 24, 2025
Malicious code in zapier-scripts (npm)
2 compromised versions
- Nov 24, 2025
Malicious code in @asyncapi/keeper (npm)
2 compromised versions
- Nov 24, 2025
Malware in zapier-scripts
1 compromised version
- Nov 24, 2025
Malware in @asyncapi/keeper
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/mock (npm)
1 compromised version
Page 257 of 4,809