Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,422 total in npm · sorted newest first- Nov 18, 2025
Malicious code in tailwindcss-webfont-awesome (npm)
- Nov 18, 2025
Malware in tailwindcss-webfont-awesome
1 compromised version
- Nov 18, 2025
Malicious code in multi-provider-settings (npm)
- Nov 18, 2025
Malware in multi-provider-settings
1 compromised version
- Nov 18, 2025
Malicious code in node-calculator-36ae (npm)
- Nov 18, 2025
Malware in node-calculator-36ae
1 compromised version
- Nov 18, 2025
Malware in node-calculator-0f50
1 compromised version
- Nov 18, 2025
Malware in mmpp
1 compromised version
- Nov 17, 2025
Malicious code in transparent-example-request99 (npm)
2 compromised versions
- Nov 17, 2025
Malicious code in ancestry-unified-logger (npm)
1 compromised version
- Nov 17, 2025
Malicious code in node-calculator-yktt (npm)
4 compromised versions
- Nov 17, 2025
Malicious code in node-calculator-feea (npm)
- Nov 17, 2025
Malicious code in node-calculator-f209 (npm)
- Nov 17, 2025
Malicious code in node-calculator-ecec (npm)
- Nov 17, 2025
Malicious code in node-calculator-e0b2 (npm)
- Nov 17, 2025
Malicious code in node-calculator-de84 (npm)
- Nov 17, 2025
Malicious code in node-calculator-d234 (npm)
- Nov 17, 2025
Malicious code in node-calculator-c3ef (npm)
- Nov 17, 2025
Malicious code in node-calculator-b57e (npm)
1 compromised version
- Nov 17, 2025
Malicious code in node-calculator-b549 (npm)
3 compromised versions
- Nov 17, 2025
Malicious code in node-calculator-9c62 (npm)
1 compromised version
- Nov 17, 2025
Malicious code in node-calculator-9b93 (npm)
1 compromised version
- Nov 17, 2025
Malicious code in node-calculator-98b6 (npm)
- Nov 17, 2025
Malicious code in node-calculator-91aa (npm)
- Nov 17, 2025
Malicious code in node-calculator-8b5f (npm)
- Nov 17, 2025
Malicious code in node-calculator-68f8 (npm)
1 compromised version
- Nov 17, 2025
Malicious code in node-calculator-522f (npm)
1 compromised version
- Nov 17, 2025
Malicious code in node-calculator-25bb (npm)
- Nov 17, 2025
Malicious code in node-calculator-239a (npm)
- Nov 17, 2025
Malicious code in node-calculator-215d (npm)
- Nov 17, 2025
Malicious code in node-calculator-1dc0 (npm)
- Nov 17, 2025
Malicious code in node-calculator-0c8f (npm)
- Nov 17, 2025
Malicious code in node-calculator-043e (npm)
- Nov 17, 2025
Malicious code in node-calculator-8ddb (npm)
1 compromised version
- Nov 17, 2025
Malicious code in node-calculator-7bea (npm)
1 compromised version
- Nov 17, 2025
Malicious code in node-calculator-ac24 (npm)
1 compromised version
- Nov 17, 2025
Malicious code in node-calculator-4e41 (npm)
1 compromised version
- Nov 17, 2025
Malicious code in node-calculator-c213 (npm)
1 compromised version
- Nov 17, 2025
Malicious code in node-calculator-9e41 (npm)
1 compromised version
- Nov 17, 2025
Malicious code in node-calculator-1b6e (npm)
1 compromised version
- Nov 17, 2025
Malicious code in node-calculator-fc9a (npm)
1 compromised version
- Nov 17, 2025
Malicious code in node-calculator-0f50 (npm)
1 compromised version
- Nov 17, 2025
Malicious code in node-calculator-x7k9 (npm)
2 compromised versions
- Nov 17, 2025
Malicious code in node-calculator-f4d5 (npm)
1 compromised version
- Nov 17, 2025
Malicious code in node-calculator-6a88 (npm)
1 compromised version
- Nov 17, 2025
Malware in @hemihatchlings/shared
1 compromised version
- Nov 17, 2025
Malware in my-team-tools
1 compromised version
- Nov 17, 2025
Malware in @mycorp/pkg-a
1 compromised version
- Nov 17, 2025
Malicious code in tailwind-view-ui (npm)
- Nov 17, 2025
Malware in tailwind-view-ui
1 compromised version
Page 267 of 4,809