Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 3, 2025
Malicious code in bp-console-fe-sg (npm)
1 compromised version
- Aug 3, 2025
Malicious code in pexels-figma (npm)
- Aug 3, 2025
Malicious code in pexels-core-sdk (npm)
- Aug 3, 2025
Malicious code in pexels-internal (npm)
- Aug 3, 2025
Malicious code in internal-newrelic-config (npm)
- Aug 3, 2025
Malicious code in nr1-github (npm)
- Aug 3, 2025
Malicious code in node-calculator-yqhi (npm)
- Aug 3, 2025
Malicious code in node-calculator-fahw (npm)
- Aug 3, 2025
Malicious code in node-calculator-splo (npm)
- Aug 3, 2025
Malicious code in cycalculator-ybvd (npm)
- Aug 3, 2025
Malicious code in cycalculator-ye51 (npm)
- Aug 3, 2025
Malicious code in undeface-test-5 (npm)
- Aug 3, 2025
Malicious code in undeface-test-1 (npm)
- Aug 3, 2025
Malicious code in currency-util (npm)
- Aug 3, 2025
Malicious code in zano_ui (npm)
- Aug 3, 2025
Malicious code in amdocs-auth-package (npm)
3 compromised versions
- Aug 2, 2025
Malicious code in aiohappyeyeballs (npm)
2 compromised versions
- Aug 2, 2025
Malicious code in xo-angular-ui-utils (npm)
3 compromised versions
- Aug 2, 2025
Malicious code in ledger-provider (npm)
1 compromised version
- Aug 2, 2025
Malicious code in undeface-test-3 (npm)
1 compromised version
- Aug 2, 2025
Malicious code in undeface-test-2 (npm)
1 compromised version
- Aug 2, 2025
Malicious code in newrelic-scheduler (npm)
5 compromised versions
- Aug 2, 2025
Malicious code in undeface (npm)
1 compromised version
- Aug 2, 2025
Malicious code in undeface-test (npm)
1 compromised version
- Aug 1, 2025
Malicious code in cerberux (npm)
2 compromised versions
- Aug 1, 2025
Malicious code in internal-random (npm)
- Aug 1, 2025
Malicious code in amdocs-core-package (npm)
1 compromised version
- Aug 1, 2025
Malicious code in tableau-redirection-service (npm)
- Aug 1, 2025
Malicious code in playwright-config-pdffiller (npm)
- Aug 1, 2025
Malicious code in eslint-config-pdffiller (npm)
- Aug 1, 2025
Malicious code in @usaa-grp-payments-web-experience/bk-acknowledge-module (npm)
2 compromised versions
- Aug 1, 2025
Malicious code in eslint-config-pdffiller-typescript (npm)
2 compromised versions
- Aug 1, 2025
Malicious code in balances-summary-widget (npm)
- Aug 1, 2025
Malicious code in customer-information (npm)
- Aug 1, 2025
Malicious code in goals-summary-widget (npm)
- Aug 1, 2025
Malicious code in vscode-kubernetes-tools (npm)
- Aug 1, 2025
Malicious code in fulfillment-auth-widget (npm)
- Aug 1, 2025
Malicious code in azuresdkpackagelist (npm)
- Aug 1, 2025
Malicious code in risk-profile-widget (npm)
- Aug 1, 2025
Malicious code in component-detection (npm)
1 compromised version
- Aug 1, 2025
Malicious code in ent-profile-unauth-stop (npm)
- Aug 1, 2025
Malicious code in web3-plugin-swisstronik (npm)
- Aug 1, 2025
Malicious code in @hotandcold/classic-webview (npm)
- Aug 1, 2025
Malicious code in pwm-components (npm)
1 compromised version
- Aug 1, 2025
Malicious code in zoop-web-sdk (npm)
- Aug 1, 2025
Malicious code in @sangith/eslint-config (npm)
- Jul 31, 2025
Malicious code in dhei-0731-pkg2 (npm)
- Jul 31, 2025
Malware in dhei-0731-pkg2
1 compromised version
- Jul 31, 2025
Malicious code in z0rsdumbtestnonshould (npm)
2 compromised versions
- Jul 31, 2025
Malicious code in wild-pet-rest-api (npm)
2 compromised versions
Page 5794 of 6,634