Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 13, 2025
Malicious code in jenkins-trigger-actio (npm)
1 compromised version
- Aug 13, 2025
Malicious code in moonskin (npm)
2 compromised versions
- Aug 13, 2025
Malicious code in recoil-shared (npm)
3 compromised versions
- Aug 13, 2025
Malicious code in advanced-korean-search (npm)
1 compromised version
- Aug 13, 2025
Malicious code in android-app-promotion (npm)
1 compromised version
- Aug 13, 2025
Malicious code in rush-plugins (npm)
1 compromised version
- Aug 13, 2025
Malicious code in kingsly (npm)
- Aug 13, 2025
Malicious code in merlin-transformer (npm)
- Aug 13, 2025
Malicious code in mm-scss-utils (npm)
- Aug 13, 2025
Malicious code in symphony-hierarchical-confusion-matrix (npm)
- Aug 13, 2025
Malicious code in snapchat-snapnet (npm)
1 compromised version
- Aug 13, 2025
Malicious code in jenkins-trigger-action (npm)
6 compromised versions
- Aug 12, 2025
Malicious code in gopro-plus-downloader (npm)
2 compromised versions
- Aug 12, 2025
Malicious code in dpais-chat-template-pwa (npm)
4 compromised versions
- Aug 12, 2025
Malicious code in electron-test-main (npm)
2 compromised versions
- Aug 12, 2025
Malicious code in @eooce/sbx (npm)
8 compromised versions
- Aug 12, 2025
Malicious code in tensorflowjs (npm)
3 compromised versions
- Aug 12, 2025
Malicious code in @seznam-diskuze/embed (npm)
1 compromised version
- Aug 12, 2025
Malicious code in mda-localise (npm)
4 compromised versions
- Aug 12, 2025
Malicious code in intel-quantum-sdk (npm)
1 compromised version
- Aug 12, 2025
Malicious code in microsoft-bonsai-api (npm)
1 compromised version
- Aug 12, 2025
Malicious code in facebook-for-woocommerce (npm)
1 compromised version
- Aug 11, 2025
Malicious code in spotify-test (npm)
- Aug 11, 2025
Malicious code in tiktok-internal (npm)
- Aug 11, 2025
Malicious code in mgtyler (npm)
- Aug 11, 2025
Malicious code in gridlock-web (npm)
- Aug 11, 2025
Malicious code in zylker-eclassifieds-ui (npm)
- Aug 11, 2025
Malicious code in localeslice (npm)
1 compromised version
- Aug 11, 2025
Malicious code in zstd-jni (npm)
- Aug 11, 2025
Malicious code in exoscale (npm)
- Aug 11, 2025
Malicious code in newrelic.log (npm)
- Aug 11, 2025
Malicious code in yandex-money-bank-utils (npm)
2 compromised versions
- Aug 11, 2025
Malicious code in @sber-business-id/srp-client (npm)
1 compromised version
- Aug 11, 2025
Malicious code in @tradair-repo/sources-react (npm)
3 compromised versions
- Aug 11, 2025
Malicious code in securitycontext-model-paypal (npm)
2 compromised versions
- Aug 11, 2025
Malicious code in angular-sources (npm)
1 compromised version
- Aug 11, 2025
Malicious code in require-turbo (npm)
3 compromised versions
- Aug 11, 2025
Malicious code in nestjs-datadog (npm)
5 compromised versions
- Aug 10, 2025
Malicious code in teste-depenconfu (npm)
1 compromised version
- Aug 10, 2025
Malicious code in poloman (npm)
1 compromised version
- Aug 10, 2025
Malicious code in eslint-plugin-react_editor (npm)
1 compromised version
- Aug 9, 2025
Malicious code in checkout-app (npm)
2 compromised versions
- Aug 9, 2025
Malicious code in badger-doc (npm)
1 compromised version
- Aug 9, 2025
Malicious code in hcs-image-viewer (npm)
3 compromised versions
- Aug 9, 2025
Malicious code in scaleft (npm)
2 compromised versions
- Aug 9, 2025
Malicious code in newrelic2-scheduler (npm)
2 compromised versions
- Aug 9, 2025
Malicious code in newrelics-scheduler (npm)
1 compromised version
- Aug 9, 2025
Malicious code in @sangith/newrelic (npm)
1 compromised version
- Aug 9, 2025
Malicious code in c-monitor-dashboard (npm)
1 compromised version
- Aug 8, 2025
Malicious code in seznam-diskuze (npm)
Page 5792 of 6,634