Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,422 total in npm · sorted newest first- Nov 24, 2025
Malicious code in @kvytech/components (npm)
1 compromised version
- Nov 24, 2025
Malware in @kvytech/components
1 compromised version
- Nov 24, 2025
Malicious code in @posthog/nuxt (npm)
1 compromised version
- Nov 24, 2025
Malware in @posthog/nuxt
1 compromised version
- Nov 24, 2025
Malicious code in @asyncapi/web-component (npm)
2 compromised versions
- Nov 24, 2025
Malware in @asyncapi/web-component
1 compromised version
- Nov 24, 2025
Malicious code in @kvytech/cli (npm)
1 compromised version
- Nov 24, 2025
Malware in @kvytech/cli
1 compromised version
- Nov 24, 2025
Malicious code in @kvytech/medusa-plugin-management (npm)
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/solsha1 (npm)
1 compromised version
- Nov 24, 2025
Malware in @kvytech/medusa-plugin-management
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/solsha1
1 compromised version
- Nov 24, 2025
Malicious code in @kvytech/medusa-plugin-product-reviews (npm)
1 compromised version
- Nov 24, 2025
Malware in @kvytech/medusa-plugin-product-reviews
1 compromised version
- Nov 24, 2025
Malicious code in @kvytech/web (npm)
1 compromised version
- Nov 24, 2025
Malware in @kvytech/web
1 compromised version
- Nov 24, 2025
Malicious code in scgsffcreator (npm)
1 compromised version
- Nov 24, 2025
Malware in scgsffcreator
1 compromised version
- Nov 24, 2025
Malicious code in vite-plugin-httpfile (npm)
1 compromised version
- Nov 24, 2025
Malware in vite-plugin-httpfile
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/curvearithmetics (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/curvearithmetics
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/dnsprovejs (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/dnsprovejs
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/reverse-records (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/reverse-records
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/ccip-read-dns-gateway (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/ccip-read-dns-gateway
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/unicode-confusables (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/unicode-confusables
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/durin-middleware (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/durin-middleware
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/ccip-read-worker-viem (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/ccip-read-worker-viem
1 compromised version
- Nov 24, 2025
Malicious code in atrix (npm)
1 compromised version
- Nov 24, 2025
Malware in atrix
1 compromised version
- Nov 24, 2025
Malicious code in @postman/node-keytar (npm)
3 compromised versions
- Nov 24, 2025
Malware in @postman/node-keytar
1 compromised version
- Nov 24, 2025
Malicious code in @asyncapi/markdown-template (npm)
2 compromised versions
- Nov 24, 2025
Malware in @asyncapi/markdown-template
1 compromised version
- Nov 24, 2025
Malicious code in exact-ticker (npm)
1 compromised version
- Nov 24, 2025
Malware in exact-ticker
1 compromised version
- Nov 24, 2025
Malicious code in @orbitgtbelgium/orbit-components (npm)
1 compromised version
- Nov 24, 2025
Malware in @orbitgtbelgium/orbit-components
1 compromised version
- Nov 24, 2025
Malicious code in react-library-setup (npm)
1 compromised version
- Nov 24, 2025
Malware in react-library-setup
1 compromised version
- Nov 24, 2025
Malicious code in @orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode (npm)
1 compromised version
- Nov 24, 2025
Malware in @orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode
1 compromised version
- Nov 24, 2025
Malicious code in @ensdomains/eth-ens-namehash (npm)
1 compromised version
- Nov 24, 2025
Malware in @ensdomains/eth-ens-namehash
1 compromised version
Page 261 of 4,809