Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 30, 2025
Malware in react-qrcode-icon
1 compromised version
- Jul 30, 2025
Malicious code in proc-log-cmd (npm)
- Jul 30, 2025
Malware in proc-log-cmd
1 compromised version
- Jul 30, 2025
Malicious code in postcss-minify-theme (npm)
- Jul 30, 2025
Malware in postcss-minify-theme
1 compromised version
- Jul 30, 2025
Malicious code in notification-clients (npm)
- Jul 30, 2025
Malware in notification-clients
1 compromised version
- Jul 30, 2025
Malicious code in node-loggerx (npm)
2 compromised versions
- Jul 30, 2025
Malware in node-loggerx
1 compromised version
- Jul 30, 2025
Malicious code in web3-rtc (npm)
- Jul 30, 2025
Malicious code in next-preconfig (npm)
- Jul 30, 2025
Malware in next-preconfig
1 compromised version
- Jul 30, 2025
Malware in web3-rtc
1 compromised version
- Jul 30, 2025
Malicious code in vite-plugin-reactjs-refresh (npm)
- Jul 30, 2025
Malicious code in json-confs (npm)
- Jul 30, 2025
Malware in vite-plugin-reactjs-refresh
1 compromised version
- Jul 30, 2025
Malware in json-confs
1 compromised version
- Jul 30, 2025
Malicious code in flowhint (npm)
- Jul 30, 2025
Malware in flowhint
1 compromised version
- Jul 30, 2025
Malicious code in exceljs-ui (npm)
- Jul 30, 2025
Malware in exceljs-ui
1 compromised version
- Jul 30, 2025
Malicious code in cookie-loggo (npm)
- Jul 30, 2025
Malicious code in cookie-logger (npm)
- Jul 30, 2025
Malware in cookie-logger
1 compromised version
- Jul 30, 2025
Malware in cookie-loggo
1 compromised version
- Jul 30, 2025
Malicious code in @kodane/patch-manager (npm)
- Jul 30, 2025
Malware in @kodane/patch-manager
1 compromised version
- Jul 29, 2025
Malicious code in @xcxcxxx/gsap3 (npm)
2 compromised versions
- Jul 29, 2025
Malware in privmx-crypto
1 compromised version
- Jul 29, 2025
Malware in ngx-satoris
1 compromised version
- Jul 29, 2025
Malicious code in yaetia (npm)
- Jul 29, 2025
Malicious code in storybook-core-core-server-presets-0 (npm)
- Jul 29, 2025
Malware in datadog-instrumentations
1 compromised version
- Jul 29, 2025
Malware in storybook-core-core-server-presets-0
1 compromised version
- Jul 29, 2025
Malware in yaetia
1 compromised version
- Jul 29, 2025
Malicious code in @sys711/my-npx-tool (npm)
- Jul 29, 2025
Malware in @sys711/my-npx-tool
1 compromised version
- Jul 29, 2025
Malware in @secsol5g/qlik-sense
1 compromised version
- Jul 29, 2025
Malware in @company-internal/logger
1 compromised version
- Jul 29, 2025
Malicious code in request-helmet (npm)
- Jul 29, 2025
Malicious code in query-logger (npm)
- Jul 29, 2025
Malware in request-helmet
1 compromised version
- Jul 29, 2025
Malware in query-logger
1 compromised version
- Jul 29, 2025
Malicious code in react-stylizer (npm)
- Jul 29, 2025
Malicious code in react-redux-stylizer (npm)
- Jul 29, 2025
Malware in react-redux-stylizer
1 compromised version
- Jul 29, 2025
Malware in react-stylizer
1 compromised version
- Jul 29, 2025
Malicious code in vite-postcss-bootstrap (npm)
1 compromised version
- Jul 29, 2025
Malware in vite-postcss-bootstrap
1 compromised version
- Jul 29, 2025
Malicious code in tailwind-theme-colors (npm)
Page 5798 of 6,634