Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 29, 2025
Malware in tailwind-theme-colors
1 compromised version
- Jul 29, 2025
Malicious code in vite-plugin-js-support (npm)
- Jul 29, 2025
Malware in vite-plugin-js-support
1 compromised version
- Jul 29, 2025
Malicious code in momentjs-poc (npm)
1 compromised version
- Jul 29, 2025
Malicious code in fast-todo-app (npm)
3 compromised versions
- Jul 29, 2025
Malware in budoux-extension
1 compromised version
- Jul 29, 2025
Malware in fast-todo-app
1 compromised version
- Jul 29, 2025
Malware in @ai0x1337/budoux-extension
1 compromised version
- Jul 29, 2025
Malware in @googlesitekit/assets
1 compromised version
- Jul 29, 2025
Malware in npmdeco
1 compromised version
- Jul 29, 2025
Malware in axr-smart-contracts
1 compromised version
- Jul 28, 2025
Malicious code in udn_extras (npm)
2 compromised versions
- Jul 28, 2025
Malicious code in vc-test-suite (npm)
- Jul 28, 2025
Malicious code in account-feapp-commons (npm)
- Jul 28, 2025
Malicious code in ifood-docusaurus-theme (npm)
- Jul 28, 2025
Malicious code in nio4r (npm)
- Jul 28, 2025
Malicious code in wbcm (npm)
- Jul 28, 2025
Malicious code in @cwlib/core (npm)
- Jul 28, 2025
Malicious code in @ai0x1337/budoux-extension (npm)
- Jul 28, 2025
Malicious code in testpkgcwlib (npm)
- Jul 28, 2025
Malicious code in hyperion-react-native-testapp (npm)
1 compromised version
- Jul 28, 2025
Malicious code in isl-server (npm)
- Jul 28, 2025
Malicious code in hubot-currencies (npm)
- Jul 28, 2025
Malicious code in com.tencent.puerts.core (npm)
1 compromised version
- Jul 28, 2025
Malicious code in tdesign-flutter (npm)
1 compromised version
- Jul 28, 2025
Malicious code in cumulus-core (npm)
1 compromised version
- Jul 28, 2025
Malicious code in trigger-dev-logger (npm)
1 compromised version
- Jul 28, 2025
Malicious code in internal-logger-embaby (npm)
- Jul 28, 2025
Malicious code in events-web1 (npm)
- Jul 28, 2025
Malicious code in ethical-ping-example (npm)
2 compromised versions
- Jul 28, 2025
Malicious code in spot-tasks (npm)
- Jul 28, 2025
Malicious code in sirius-import-article (npm)
4 compromised versions
- Jul 28, 2025
Malicious code in node-sqlite-fly-tutorial (npm)
- Jul 28, 2025
Malicious code in vortigawe (npm)
1 compromised version
- Jul 28, 2025
Malicious code in nova-ssr-utils (npm)
2 compromised versions
- Jul 28, 2025
Malicious code in nova-node-utils (npm)
1 compromised version
- Jul 28, 2025
Malicious code in react-native-at-internet-example (npm)
- Jul 28, 2025
Malicious code in slack-astra-app (npm)
2 compromised versions
- Jul 28, 2025
Malicious code in work-planner-client (npm)
- Jul 28, 2025
Malicious code in conformance-test (npm)
- Jul 28, 2025
Malicious code in tidb-lightning-web (npm)
- Jul 28, 2025
Malicious code in onboarding-lemonde (npm)
4 compromised versions
- Jul 28, 2025
Malicious code in style-postprocessor (npm)
- Jul 28, 2025
Malware in style-postprocessor
1 compromised version
- Jul 28, 2025
Malware in kalitestbbh
1 compromised version
- Jul 28, 2025
Malware in kalitest11
1 compromised version
- Jul 28, 2025
Malware in plugin-basic-ssl
1 compromised version
- Jul 28, 2025
Malware in google-protobuf-conformance
1 compromised version
- Jul 28, 2025
Malicious code in solhint-plugin-lido-csm (npm)
- Jul 28, 2025
Malware in solhint-plugin-lido-csm
1 compromised version
Page 5799 of 6,634