Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,422 total in npm · sorted newest first- Nov 24, 2025
Malware in @ensdomains/mock
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/dnssec-oracle-anchors (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/dnssec-oracle-anchors
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/ens-archived-contracts (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/ens-archived-contracts
1 compromised version
- Nov 24, 2025
Malicious code in @zapier/ai-actions (npm)
3 compromised versions
- Nov 24, 2025
Malware in @zapier/ai-actions
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/offchain-resolver-contracts (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/offchain-resolver-contracts
1 compromised version
- Nov 24, 2025
Malicious code in @asyncapi/server-api (npm)
2 compromised versions
- Nov 24, 2025
Malware in @asyncapi/server-api
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/name-wrapper (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/name-wrapper
1 compromised version
- Nov 24, 2025
Malicious code in create-hardhat3-app (npm)
4 compromised versions
- Nov 24, 2025
Malware in create-hardhat3-app
1 compromised version
- Nov 24, 2025
Malicious code in test-foundry-app (npm)
4 compromised versions
- Nov 24, 2025
Malware in test-foundry-app
1 compromised version
- Nov 24, 2025
Malicious code in jan-browser (npm)
1 compromised version
- Nov 24, 2025
Malware in jan-browser
1 compromised version
- Nov 24, 2025
Malicious code in go-template (npm)
2 compromised versions
- Nov 24, 2025
Malware in go-template
1 compromised version
- Nov 24, 2025
Malicious code in @strapbuild/react-native-perspective-image-cropper (npm)
1 compromised version
- Nov 24, 2025
Malware in @strapbuild/react-native-perspective-image-cropper
1 compromised version
- Nov 24, 2025
Malicious code in manual-billing-system-miniapp-api (npm)
1 compromised version
- Nov 24, 2025
Malware in manual-billing-system-miniapp-api
1 compromised version
- Nov 24, 2025
Malicious code in korea-administrative-area-geo-json-util (npm)
1 compromised version
- Nov 24, 2025
Malware in korea-administrative-area-geo-json-util
1 compromised version
- Nov 24, 2025
Malicious code in @actbase/css-to-react-native-transform (npm)
1 compromised version
- Nov 24, 2025
Malware in @actbase/css-to-react-native-transform
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/vite-plugin-i18next-loader (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/vite-plugin-i18next-loader
1 compromised version
- Nov 24, 2025
Malicious code in @actbase/node-server (npm)
1 compromised version
- Nov 24, 2025
Malware in @actbase/node-server
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/hardhat-toolbox-viem-extended (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/hardhat-toolbox-viem-extended
1 compromised version
- Nov 24, 2025
Malicious code in @actbase/react-native-fast-image (npm)
1 compromised version
- Nov 24, 2025
Malware in @actbase/react-native-fast-image
1 compromised version
- Nov 24, 2025
Malicious code in @asyncapi/python-paho-template (npm)
2 compromised versions
- Nov 24, 2025
Malware in @asyncapi/python-paho-template
1 compromised version
- Nov 24, 2025
Malicious code in @asyncapi/go-watermill-template (npm)
2 compromised versions
- Nov 24, 2025
Malware in @asyncapi/go-watermill-template
1 compromised version
- Nov 24, 2025
Malicious code in @actbase/react-native-less-transformer (npm)
1 compromised version
- Nov 24, 2025
Malware in @actbase/react-native-less-transformer
1 compromised version
- Nov 24, 2025
Malicious code in @asyncapi/java-template (npm)
2 compromised versions
- Nov 24, 2025
Malware in @asyncapi/java-template
1 compromised version
- Nov 24, 2025
Malicious code in medusa-plugin-product-reviews-kvy (npm)
1 compromised version
- Nov 24, 2025
Malware in medusa-plugin-product-reviews-kvy
1 compromised version
- Nov 24, 2025
Malicious code in @aryanhussain/my-angular-lib (npm)
1 compromised version
- Nov 24, 2025
Malware in @aryanhussain/my-angular-lib
1 compromised version
- Nov 24, 2025
Malicious code in devstart-cli (npm)
1 compromised version
Page 258 of 4,809