Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 22, 2025
Malicious code in splice-pulumi-common-validator (npm)
- Jul 22, 2025
Malicious code in @md_nafeed/synpress-metamask (npm)
- Jul 22, 2025
Malicious code in chime-config (npm)
- Jul 22, 2025
Malicious code in chime-ci-helper (npm)
- Jul 22, 2025
Malicious code in chime-secrets (npm)
- Jul 22, 2025
Malicious code in chime-core-utils (npm)
- Jul 22, 2025
Malicious code in chime-utils (npm)
- Jul 22, 2025
Malicious code in is (npm)
2 compromised versions
- Jul 22, 2025
Malicious code in paypal-examples-langchain (npm)
- Jul 22, 2025
Malware in spl-token-v2
1 compromised version
- Jul 22, 2025
Malicious code in @jaswanthlanka/mcp-proxy (npm)
- Jul 22, 2025
Malware in @jaswanthlanka/mcp-proxy
1 compromised version
- Jul 22, 2025
Malware in yandex-metrica
1 compromised version
- Jul 22, 2025
Malware in yoomoney-github-landing
1 compromised version
- Jul 22, 2025
Malware in xpvnsulc
1 compromised version
- Jul 22, 2025
Malware in tutorial_front
1 compromised version
- Jul 22, 2025
Malware in dep-confusion-poc-monke
1 compromised version
- Jul 22, 2025
Malicious code in adspaces (npm)
1 compromised version
- Jul 22, 2025
Malware in cookiefunctions
1 compromised version
- Jul 22, 2025
Malware in adspaces
1 compromised version
- Jul 22, 2025
Malware in nbastatsleftnav
1 compromised version
- Jul 22, 2025
Malicious code in cloudmedia (npm)
- Jul 22, 2025
Malware in cloudmedia
1 compromised version
- Jul 22, 2025
Malicious code in nodemail-lite (npm)
- Jul 22, 2025
Malware in nodemail-lite
1 compromised version
- Jul 22, 2025
Malicious code in nodemailer-enhancer (npm)
- Jul 22, 2025
Malware in nodemailer-enhancer
1 compromised version
- Jul 22, 2025
Malware in wix-test-package
1 compromised version
- Jul 22, 2025
Malicious code in obvbd (npm)
1 compromised version
- Jul 22, 2025
Malware in obvbd
1 compromised version
- Jul 22, 2025
Malware in dashboard-demo
1 compromised version
- Jul 22, 2025
Malware in textlocal-messenger
1 compromised version
- Jul 22, 2025
Malware in vault-wallet-toolkit
1 compromised version
- Jul 22, 2025
Malicious code in dc-dependencyv (npm)
- Jul 22, 2025
Malware in dc-dependencyv
1 compromised version
- Jul 22, 2025
Malware in ru.rustore.core
1 compromised version
- Jul 22, 2025
Malware in yarn-test-git-repo
1 compromised version
- Jul 22, 2025
Malicious code in json-cookie-csv (npm)
4 compromised versions
- Jul 22, 2025
Malware in json-cookie-csv
1 compromised version
- Jul 22, 2025
Malicious code in internallib_v866 (npm)
- Jul 22, 2025
Malware in internallib_v866
1 compromised version
- Jul 22, 2025
Malicious code in mydealer-content-service (npm)
3 compromised versions
- Jul 22, 2025
Malware in mydealer-content-service
1 compromised version
- Jul 22, 2025
Malicious code in user-interaction-service (npm)
2 compromised versions
- Jul 22, 2025
Malicious code in partnersservices-payoneer (npm)
5 compromised versions
- Jul 22, 2025
Malicious code in navigation-service (npm)
2 compromised versions
- Jul 22, 2025
Malicious code in mydealer-service (npm)
5 compromised versions
- Jul 22, 2025
Malicious code in mydealer-configuration-service (npm)
5 compromised versions
- Jul 22, 2025
Malicious code in aspida-lsd (npm)
1 compromised version
- Jul 22, 2025
Malicious code in api-key-provider (npm)
Page 5804 of 6,634