Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 25, 2025
Malicious code in testinghs (npm)
- Jul 25, 2025
Malicious code in rns-partner-registrar (npm)
- Jul 25, 2025
Malicious code in latam-xp-analytics-plugin-absmartly (npm)
- Jul 25, 2025
Malicious code in react-server-dom-turbopack-experimental (npm)
- Jul 25, 2025
Malicious code in scheduler-experimental-builtin (npm)
- Jul 25, 2025
Malicious code in react-server-dom-webpack-experimental (npm)
- Jul 25, 2025
Malicious code in tool-commitizen-adapter-xp (npm)
- Jul 25, 2025
Malicious code in @teamstelemetry/shared-logger (npm)
- Jul 25, 2025
Malicious code in events-web (npm)
2 compromised versions
- Jul 25, 2025
Malicious code in jsmimeparser (npm)
- Jul 25, 2025
Malicious code in budoux-extension (npm)
1 compromised version
- Jul 25, 2025
Malicious code in xp-anti-fraud-js-lib (npm)
1 compromised version
- Jul 25, 2025
Malicious code in scheduler-builtin (npm)
1 compromised version
- Jul 25, 2025
Malicious code in @googlesitekit/assets (npm)
1 compromised version
- Jul 25, 2025
Malicious code in gafana-test-utils (npm)
3 compromised versions
- Jul 25, 2025
Malicious code in grafana-internal-config-loader (npm)
- Jul 25, 2025
Malware in chime-ci-helper
1 compromised version
- Jul 25, 2025
Malware in grafana-config-pipeline
1 compromised version
- Jul 25, 2025
Malware in chime-core-utils
1 compromised version
- Jul 25, 2025
Malware in grafana-internal-config-loader
1 compromised version
- Jul 25, 2025
Malware in chime-secrets
1 compromised version
- Jul 25, 2025
Malware in chime-config
1 compromised version
- Jul 25, 2025
Malware in chime-utils
1 compromised version
- Jul 25, 2025
Malicious code in grafana-config-pipeline (npm)
1 compromised version
- Jul 25, 2025
Malicious code in vitejs-plugin-react-refresh (npm)
- Jul 25, 2025
Malicious code in jsonlise-conf (npm)
- Jul 25, 2025
Malware in vitejs-plugin-react-refresh
1 compromised version
- Jul 25, 2025
Malware in jsonlise-conf
1 compromised version
- Jul 25, 2025
Malicious code in dexa56 (npm)
- Jul 25, 2025
Malware in dexa56
1 compromised version
- Jul 25, 2025
Malware in tw-core-ui
1 compromised version
- Jul 25, 2025
Malicious code in jet-os-detection (npm)
- Jul 25, 2025
Malware in jet-os-detection
1 compromised version
- Jul 25, 2025
Malware in prospects
1 compromised version
- Jul 25, 2025
Malware in lscommons
1 compromised version
- Jul 25, 2025
Malware in igshared
1 compromised version
- Jul 25, 2025
Malware in lspushpage
1 compromised version
- Jul 25, 2025
Malware in flow-playground
1 compromised version
- Jul 25, 2025
Malware in ifood-companies-manager-front
1 compromised version
- Jul 25, 2025
Malware in cbd2.1
1 compromised version
- Jul 25, 2025
Malicious code in preset-classic (npm)
1 compromised version
- Jul 25, 2025
Malware in preset-classic
1 compromised version
- Jul 25, 2025
Malware in @0xzyo111/frontend-logger
1 compromised version
- Jul 25, 2025
Malicious code in bufbuild-core (npm)
1 compromised version
- Jul 24, 2025
Malicious code in plugin-basic-ssl (npm)
1 compromised version
- Jul 24, 2025
Malicious code in dndattachment (npm)
2 compromised versions
- Jul 24, 2025
Malicious code in kalitest11 (npm)
- Jul 24, 2025
Malicious code in airbnb-prop (npm)
1 compromised version
- Jul 24, 2025
Malicious code in airbnb-private (npm)
1 compromised version
- Jul 24, 2025
Malicious code in airbnb-prod (npm)
1 compromised version
Page 5801 of 6,634