Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 28, 2025
Malicious code in bfiweb (npm)
- Jul 28, 2025
Malware in bfiweb
1 compromised version
- Jul 28, 2025
Malware in creditorwatch
1 compromised version
- Jul 28, 2025
Malware in nonexistentgibberish
1 compromised version
- Jul 28, 2025
Malware in mv-fe-scss
1 compromised version
- Jul 28, 2025
Malware in headless-skia
1 compromised version
- Jul 28, 2025
Malware in dndattachment
1 compromised version
- Jul 28, 2025
Malware in mini-builder
1 compromised version
- Jul 28, 2025
Malware in paypal-examples-langchain
1 compromised version
- Jul 28, 2025
Malware in openai-fm
1 compromised version
- Jul 28, 2025
Malware in swap-token-list-poc
1 compromised version
- Jul 28, 2025
Malware in db-connections-templates
1 compromised version
- Jul 28, 2025
Malware in cloud-inquisitor
1 compromised version
- Jul 28, 2025
Malware in shopify-css-import
1 compromised version
- Jul 28, 2025
Malware in indexer-worker-service
1 compromised version
- Jul 28, 2025
Malware in ids-core
1 compromised version
- Jul 28, 2025
Malware in ipp-auth-service-tools
1 compromised version
- Jul 28, 2025
Malware in react-server-dom-turbopack-experimental
1 compromised version
- Jul 28, 2025
Malware in airbnb-booking
1 compromised version
- Jul 28, 2025
Malware in airbnb-prod
1 compromised version
- Jul 28, 2025
Malware in testinghs
1 compromised version
- Jul 28, 2025
Malware in react-server-dom-webpack-experimental
1 compromised version
- Jul 28, 2025
Malware in fuzzponent
1 compromised version
- Jul 28, 2025
Malware in scheduler-builtin
1 compromised version
- Jul 28, 2025
Malware in airbnb-private
1 compromised version
- Jul 28, 2025
Malware in scheduler-experimental-builtin
1 compromised version
- Jul 28, 2025
Malware in airbnb-prop
1 compromised version
- Jul 28, 2025
Malicious code in uidraftism (npm)
- Jul 28, 2025
Malware in uidraftism
1 compromised version
- Jul 26, 2025
Malicious code in acronis-platform-configs (npm)
- Jul 26, 2025
Malicious code in turborepo-tests-helpers (npm)
- Jul 26, 2025
Malicious code in hast-util-to-babel-ast (npm)
1 compromised version
- Jul 26, 2025
Malicious code in node-buildpack-test-app (npm)
2 compromised versions
- Jul 26, 2025
Malicious code in package-with-conditions (npm)
2 compromised versions
- Jul 26, 2025
Malicious code in blank-pkg (npm)
1 compromised version
- Jul 26, 2025
Malicious code in prysk (npm)
1 compromised version
- Jul 26, 2025
Malicious code in next-minimal-server (npm)
1 compromised version
- Jul 26, 2025
Malicious code in fuzzponent (npm)
1 compromised version
- Jul 26, 2025
Malicious code in redux-saga-task-cancel-rce (npm)
1 compromised version
- Jul 26, 2025
Malicious code in redux-init-rce (npm)
1 compromised version
- Jul 26, 2025
Malicious code in redux-probe-unknown-action-rce (npm)
1 compromised version
- Jul 26, 2025
Malicious code in redux-saga-channel-end-rce (npm)
1 compromised version
- Jul 26, 2025
Malicious code in dva-update-rce (npm)
1 compromised version
- Jul 26, 2025
Malicious code in dva-loading-show-rce (npm)
1 compromised version
- Jul 26, 2025
Malicious code in dva-loading-hide-rce (npm)
1 compromised version
- Jul 26, 2025
Malicious code in redux-replace-rce (npm)
1 compromised version
- Jul 26, 2025
Malicious code in react-nodes (npm)
1 compromised version
- Jul 26, 2025
Malicious code in @grafanacloud/plugins-platform-backend (npm)
1 compromised version
- Jul 26, 2025
Malicious code in @grafanacloud/test-utils (npm)
3 compromised versions
- Jul 25, 2025
Malicious code in airbnb-booking (npm)
Page 5800 of 6,634