Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 8, 2025
Malicious code in singlestore-avro-sample (npm)
- Aug 8, 2025
Malicious code in hotdoc-ember-bookings (npm)
- Aug 8, 2025
Malicious code in asciidoctor.rb (npm)
- Aug 8, 2025
Malicious code in sendbird-uikit-sample-cli (npm)
3 compromised versions
- Aug 8, 2025
Malicious code in sendbird-groupchannel (npm)
1 compromised version
- Aug 8, 2025
Malicious code in mapbox-gl-js-toys (npm)
- Aug 8, 2025
Malicious code in newrelic-helper-lib (npm)
- Aug 8, 2025
Malicious code in posa-loginpage-plugin (npm)
2 compromised versions
- Aug 8, 2025
Malicious code in latam-xp-analytics-plugin-gtm (npm)
1 compromised version
- Aug 8, 2025
Malicious code in beliya-xhn1355h (npm)
1 compromised version
- Aug 8, 2025
Malicious code in isotopet4s-layout (npm)
1 compromised version
- Aug 8, 2025
Malicious code in third-party-library (npm)
1 compromised version
- Aug 8, 2025
Malicious code in horizon-ui-ng (npm)
8 compromised versions
- Aug 8, 2025
Malicious code in react-native-kraken-oauth (npm)
1 compromised version
- Aug 8, 2025
Malicious code in nodejs-with-singlestore-demo (npm)
1 compromised version
- Aug 7, 2025
Malicious code in sendbird-visual-test (npm)
3 compromised versions
- Aug 7, 2025
Malicious code in packaging-common (npm)
1 compromised version
- Aug 7, 2025
Malicious code in sendbird-uikit-testing-tools (npm)
1 compromised version
- Aug 7, 2025
Malicious code in sendbird-notifications-extension-example (npm)
1 compromised version
- Aug 7, 2025
Malicious code in sendbird-docs-validation (npm)
2 compromised versions
- Aug 7, 2025
Malicious code in epiro (npm)
1 compromised version
- Aug 6, 2025
Malicious code in google-webfonts-helper (npm)
2 compromised versions
- Aug 6, 2025
Malicious code in criteo-video-player (npm)
1 compromised version
- Aug 6, 2025
Malicious code in simple-web-app-package (npm)
1 compromised version
- Aug 6, 2025
Malicious code in adminarmorproject (npm)
- Aug 6, 2025
Malicious code in nova-state (npm)
- Aug 6, 2025
Malicious code in @evt-cdk/codepipeline (npm)
- Aug 6, 2025
Malicious code in gik2 (npm)
- Aug 6, 2025
Malicious code in gik2-test (npm)
- Aug 6, 2025
Malicious code in testt-tester (npm)
5 compromised versions
- Aug 6, 2025
Malicious code in @evt-cdk/core (npm)
1 compromised version
- Aug 6, 2025
Malicious code in lynx-libs-mono (npm)
2 compromised versions
- Aug 6, 2025
Malicious code in productboard-freemail (npm)
7 compromised versions
- Aug 6, 2025
Malicious code in productboard-eslint-plugin-relay (npm)
4 compromised versions
- Aug 5, 2025
Malicious code in htmlcontent (npm)
1 compromised version
- Aug 5, 2025
Malicious code in powerbi-visuals-powerkpi (npm)
2 compromised versions
- Aug 5, 2025
Malicious code in dionisio (npm)
1 compromised version
- Aug 5, 2025
Malicious code in faulthandler (npm)
- Aug 5, 2025
Malicious code in productboard-html-to-image (npm)
3 compromised versions
- Aug 5, 2025
Malicious code in gsochub (npm)
1 compromised version
- Aug 4, 2025
Malicious code in local-dep (npm)
1 compromised version
- Aug 4, 2025
Malicious code in ace-widgets (npm)
- Aug 4, 2025
Malicious code in jcr-hopper (npm)
- Aug 4, 2025
Malicious code in byteplus-public-aiso (npm)
1 compromised version
- Aug 4, 2025
Malicious code in byteplus-platform-runtime (npm)
1 compromised version
- Aug 4, 2025
Malicious code in thisisthedaventestz (npm)
1 compromised version
- Aug 4, 2025
Malicious code in thisisthedaventest (npm)
1 compromised version
- Aug 4, 2025
Malicious code in thisisthedaventestpoc (npm)
1 compromised version
- Aug 4, 2025
Malware in epic-fortnite-shared-values
1 compromised version
- Aug 4, 2025
Malware in epic-games-nav-share
1 compromised version
Page 5793 of 6,634