Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,422 total in npm · sorted newest first- Nov 24, 2025
Malicious code in orbit-nebula-draw-tools (npm)
1 compromised version
- Nov 24, 2025
Malware in orbit-nebula-draw-tools
1 compromised version
- Nov 24, 2025
Malicious code in @orbitgtbelgium/time-slider (npm)
1 compromised version
- Nov 24, 2025
Malware in @orbitgtbelgium/time-slider
1 compromised version
- Nov 24, 2025
Malicious code in react-element-prompt-inspector (npm)
1 compromised version
- Nov 24, 2025
Malware in react-element-prompt-inspector
1 compromised version
- Nov 24, 2025
Malicious code in @trigo/pathfinder-ui-css (npm)
1 compromised version
- Nov 24, 2025
Malware in @trigo/pathfinder-ui-css
1 compromised version
- Nov 24, 2025
Malicious code in eslint-config-trigo (npm)
1 compromised version
- Nov 24, 2025
Malware in eslint-config-trigo
1 compromised version
- Nov 24, 2025
Malicious code in @trigo/fsm (npm)
1 compromised version
- Nov 24, 2025
Malware in @trigo/fsm
1 compromised version
- Nov 24, 2025
Malicious code in @trigo/atrix (npm)
1 compromised version
- Nov 24, 2025
Malware in @trigo/atrix
1 compromised version
- Nov 24, 2025
Malicious code in @trigo/atrix-postgres (npm)
1 compromised version
- Nov 24, 2025
Malware in @trigo/atrix-postgres
1 compromised version
- Nov 24, 2025
Malicious code in trigo-react-app (npm)
1 compromised version
- Nov 24, 2025
Malware in trigo-react-app
1 compromised version
- Nov 24, 2025
Malicious code in @trigo/bool-expressions (npm)
1 compromised version
- Nov 24, 2025
Malware in @trigo/bool-expressions
1 compromised version
- Nov 24, 2025
Malicious code in @trigo/eslint-config-trigo (npm)
1 compromised version
- Nov 24, 2025
Malware in @trigo/eslint-config-trigo
1 compromised version
- Nov 24, 2025
Malicious code in @trigo/trigo-hapijs (npm)
1 compromised version
- Nov 24, 2025
Malware in @trigo/trigo-hapijs
1 compromised version
- Nov 24, 2025
Malicious code in @trigo/node-soap (npm)
1 compromised version
- Nov 24, 2025
Malware in @trigo/node-soap
1 compromised version
- Nov 24, 2025
Malicious code in @trigo/jsdt (npm)
1 compromised version
- Nov 24, 2025
Malware in @trigo/jsdt
1 compromised version
- Nov 24, 2025
Malicious code in bool-expressions (npm)
1 compromised version
- Nov 24, 2025
Malware in bool-expressions
1 compromised version
- Nov 24, 2025
Malicious code in @trigo/atrix-redis (npm)
1 compromised version
- Nov 24, 2025
Malware in @trigo/atrix-redis
1 compromised version
- Nov 24, 2025
Malicious code in @trigo/atrix-acl (npm)
1 compromised version
- Nov 24, 2025
Malware in @trigo/atrix-acl
1 compromised version
- Nov 24, 2025
Malicious code in @trigo/atrix-orientdb (npm)
1 compromised version
- Nov 24, 2025
Malware in @trigo/atrix-orientdb
1 compromised version
- Nov 24, 2025
Malicious code in @trigo/keycloak-api (npm)
1 compromised version
- Nov 24, 2025
Malware in @trigo/keycloak-api
1 compromised version
- Nov 24, 2025
Malicious code in @asyncapi/problem (npm)
2 compromised versions
- Nov 24, 2025
Malware in @asyncapi/problem
1 compromised version
- Nov 24, 2025
Malicious code in @trigo/atrix-mongoose (npm)
1 compromised version
- Nov 24, 2025
Malware in @trigo/atrix-mongoose
1 compromised version
- Nov 24, 2025
Malicious code in @posthog/rrdom (npm)
1 compromised version
- Nov 24, 2025
Malware in @posthog/rrdom
1 compromised version
- Nov 24, 2025
Malicious code in @posthog/rrweb-snapshot (npm)
1 compromised version
- Nov 24, 2025
Malware in @posthog/rrweb-snapshot
1 compromised version
- Nov 24, 2025
Malicious code in atrix-mongoose (npm)
1 compromised version
- Nov 24, 2025
Malware in atrix-mongoose
1 compromised version
- Nov 24, 2025
Malicious code in @posthog/rrweb-utils (npm)
1 compromised version
- Nov 24, 2025
Malware in @posthog/rrweb-utils
1 compromised version
Page 262 of 4,809