Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 31, 2025
Malicious code in walmart-ui (npm)
1 compromised version
- Jul 31, 2025
Malicious code in varshade (npm)
1 compromised version
- Jul 31, 2025
Malicious code in thehut (npm)
1 compromised version
- Jul 31, 2025
Malicious code in test-package-avinav (npm)
1 compromised version
- Jul 31, 2025
Malicious code in test-confusion2 (npm)
1 compromised version
- Jul 31, 2025
Malicious code in test-confusion-detector (npm)
1 compromised version
- Jul 31, 2025
Malicious code in test-confusion (npm)
1 compromised version
- Jul 31, 2025
Malicious code in tensor-nft-js (npm)
6 compromised versions
- Jul 31, 2025
Malicious code in synerix (npm)
3 compromised versions
- Jul 31, 2025
Malicious code in sukhrajaujla (npm)
1 compromised version
- Jul 31, 2025
Malicious code in stv-utils-frontend (npm)
2 compromised versions
- Jul 31, 2025
Malicious code in solarapatcher (npm)
1 compromised version
- Jul 31, 2025
Malicious code in simple-auth-manager-ui (npm)
1 compromised version
- Jul 31, 2025
Malicious code in shop-disclaimer (npm)
7 compromised versions
- Jul 31, 2025
Malicious code in seller-center (npm)
1 compromised version
- Jul 31, 2025
Malicious code in schematics-cli (npm)
1 compromised version
- Jul 31, 2025
Malicious code in sajarilib (npm)
3 compromised versions
- Jul 31, 2025
Malicious code in react-is-router (npm)
1 compromised version
- Jul 31, 2025
Malicious code in processes-widget-fe-commons (npm)
2 compromised versions
- Jul 31, 2025
Malicious code in pr0tobuff-loaders-alt (npm)
1 compromised version
- Jul 31, 2025
Malicious code in pr0tobuff-loaders (npm)
4 compromised versions
- Jul 31, 2025
Malicious code in pr0tobuff (npm)
1 compromised version
- Jul 31, 2025
Malicious code in policy-agent-client (npm)
1 compromised version
- Jul 31, 2025
Malicious code in pmcrypto (npm)
2 compromised versions
- Jul 31, 2025
Malicious code in npm-ot-test (npm)
1 compromised version
- Jul 31, 2025
Malicious code in nodemailer-utils (npm)
1 compromised version
- Jul 31, 2025
Malicious code in node-melitk-otel (npm)
1 compromised version
- Jul 31, 2025
Malicious code in ninjaonsteroids (npm)
32 compromised versions
- Jul 31, 2025
Malicious code in nf-nfa-types (npm)
1 compromised version
- Jul 31, 2025
Malicious code in net.operation (npm)
1 compromised version
- Jul 31, 2025
Malicious code in ndsdshdjshdjsh (npm)
1 compromised version
- Jul 31, 2025
Malicious code in my-confused-package (npm)
1 compromised version
- Jul 31, 2025
Malicious code in modalvalidator2 (npm)
2 compromised versions
- Jul 31, 2025
Malicious code in modal-arbitary (npm)
3 compromised versions
- Jul 31, 2025
Malicious code in mod-trans (npm)
1 compromised version
- Jul 31, 2025
Malicious code in metric_collector (npm)
1 compromised version
- Jul 31, 2025
Malicious code in mashloops (npm)
1 compromised version
- Jul 31, 2025
Malicious code in lint-staged-custom (npm)
1 compromised version
- Jul 31, 2025
Malicious code in keypair-encryption-utils (npm)
1 compromised version
- Jul 31, 2025
Malicious code in just-elements (npm)
1 compromised version
- Jul 31, 2025
Malicious code in jsonwedjoken (npm)
4 compromised versions
- Jul 31, 2025
Malicious code in intercom-gtm-js (npm)
1 compromised version
- Jul 31, 2025
Malicious code in hushlockler (npm)
1 compromised version
- Jul 31, 2025
Malicious code in gulp-prestashop (npm)
1 compromised version
- Jul 31, 2025
Malicious code in gjsdgjgjt6 (npm)
1 compromised version
- Jul 31, 2025
Malicious code in frontend-feature-flags (npm)
1 compromised version
- Jul 31, 2025
Malicious code in fooldependppu60h (npm)
1 compromised version
- Jul 31, 2025
Malicious code in fooldependaairbf (npm)
1 compromised version
- Jul 31, 2025
Malicious code in fasterhttp (npm)
3 compromised versions
- Jul 31, 2025
Malicious code in ethers-js-core (npm)
1 compromised version
Page 5795 of 6,634