Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,422 total in npm · sorted newest first- Nov 20, 2025
Malicious code in node-calculator-fa00 (npm)
- Nov 20, 2025
Malicious code in just-a-calculator (npm)
- Nov 20, 2025
Malware in just-a-calculator
1 compromised version
- Nov 20, 2025
Malware in node-calculator-fa00
1 compromised version
- Nov 20, 2025
Malware in node-calculator-x7k9
1 compromised version
- Nov 19, 2025
Malicious code in lululemon-b2b-utils (npm)
2 compromised versions
- Nov 19, 2025
Malicious code in hellospa (npm)
2 compromised versions
- Nov 19, 2025
Malicious code in node-calculator-cf8c (npm)
1 compromised version
- Nov 19, 2025
Malicious code in alicenpmpackage13 (npm)
1 compromised version
- Nov 19, 2025
Malicious code in alicenpmpackage1 (npm)
1 compromised version
- Nov 19, 2025
Malicious code in react-svg-module (npm)
- Nov 19, 2025
Malicious code in react-svg-helper (npm)
- Nov 19, 2025
Malware in react-svg-module
1 compromised version
- Nov 19, 2025
Malware in react-svg-helper
1 compromised version
- Nov 19, 2025
Malicious code in node-calculator-8bf9 (npm)
1 compromised version
- Nov 19, 2025
Malicious code in node-calculator-b0e4 (npm)
1 compromised version
- Nov 19, 2025
Malicious code in werufgugweuiguiwergqui (npm)
1 compromised version
- Nov 19, 2025
Malicious code in kc-next (npm)
1 compromised version
- Nov 18, 2025
Malicious code in captcha-paypal (npm)
1 compromised version
- Nov 18, 2025
Malicious code in gbiz-next (npm)
1 compromised version
- Nov 18, 2025
Malicious code in security-testing-research22 (npm)
1 compromised version
- Nov 18, 2025
Malicious code in node-calculator-3e62 (npm)
- Nov 18, 2025
Malware in node-calculator-3e62
1 compromised version
- Nov 18, 2025
Malware in node-calculator-4e41
1 compromised version
- Nov 18, 2025
Malicious code in tailwindcss-breezium (npm)
- Nov 18, 2025
Malware in tailwindcss-breezium
1 compromised version
- Nov 18, 2025
Malicious code in @grumpycoffeecup/hello-npm-world (npm)
- Nov 18, 2025
Malware in @grumpycoffeecup/hello-npm-world
1 compromised version
- Nov 18, 2025
Malicious code in @profmego/alipay-babyblue (npm)
3 compromised versions
- Nov 18, 2025
Malware in @profmego/alipay-babyblue
1 compromised version
- Nov 18, 2025
Malicious code in mongoose-odm (npm)
- Nov 18, 2025
Malware in mongoose-odm
1 compromised version
- Nov 18, 2025
Malicious code in tailwindcss-setfavicon (npm)
- Nov 18, 2025
Malware in tailwindcss-setfavicon
1 compromised version
- Nov 18, 2025
Malicious code in workingstealer (npm)
- Nov 18, 2025
Malicious code in scriptstealer (npm)
- Nov 18, 2025
Malicious code in mystealer (npm)
- Nov 18, 2025
Malicious code in finastealer (npm)
- Nov 18, 2025
Malicious code in 1libxmljs2 (npm)
- Nov 18, 2025
Malware in workingstealer
1 compromised version
- Nov 18, 2025
Malware in mystealer
1 compromised version
- Nov 18, 2025
Malware in finastealer
1 compromised version
- Nov 18, 2025
Malware in 1libxmljs2
1 compromised version
- Nov 18, 2025
Malware in scriptstealer
1 compromised version
- Nov 18, 2025
Malicious code in chai-type (npm)
- Nov 18, 2025
Malware in chai-type
1 compromised version
- Nov 18, 2025
Malware in crediteligibilityserv
1 compromised version
- Nov 18, 2025
Malware in servicecore-logger
1 compromised version
- Nov 18, 2025
Malicious code in pretty-jsonify (npm)
- Nov 18, 2025
Malware in pretty-jsonify
1 compromised version
Page 266 of 4,809