Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 22, 2025
Malicious code in adaptivecards-extras (npm)
8 compromised versions
- Jul 22, 2025
Malware in navigation-service
1 compromised version
- Jul 22, 2025
Malware in mydealer-service
1 compromised version
- Jul 22, 2025
Malware in financialforce
1 compromised version
- Jul 22, 2025
Malware in api-key-provider
1 compromised version
- Jul 22, 2025
Malware in mydealer-configuration-service
1 compromised version
- Jul 22, 2025
Malware in jquery-dragster
1 compromised version
- Jul 22, 2025
Malware in partnersservices-payoneer
1 compromised version
- Jul 22, 2025
Malware in adaptivecards-extras
1 compromised version
- Jul 22, 2025
Malware in aspida-lsd
1 compromised version
- Jul 22, 2025
Malware in user-interaction-service
1 compromised version
- Jul 22, 2025
Malicious code in nf-cons-log (npm)
6 compromised versions
- Jul 22, 2025
Malicious code in monosize-bundler-rsbuild (npm)
8 compromised versions
- Jul 22, 2025
Malicious code in googleapis-node (npm)
9 compromised versions
- Jul 22, 2025
Malicious code in apple-psh (npm)
9 compromised versions
- Jul 22, 2025
Malware in paypal-url-generator
1 compromised version
- Jul 22, 2025
Malware in monosize-bundler-rsbuild
1 compromised version
- Jul 22, 2025
Malware in nf-cons-log
1 compromised version
- Jul 22, 2025
Malware in googleapis-node
1 compromised version
- Jul 22, 2025
Malware in apple-psh
1 compromised version
- Jul 22, 2025
Malicious code in firefox-puppeteer (npm)
2 compromised versions
- Jul 22, 2025
Malicious code in firefox-profiler (npm)
1 compromised version
- Jul 22, 2025
Malware in firefox-puppeteer
1 compromised version
- Jul 22, 2025
Malware in paypal-invoicing
1 compromised version
- Jul 22, 2025
Malware in firefox-profiler
1 compromised version
- Jul 22, 2025
Malicious code in internal-plugin-telemetry-backend (npm)
- Jul 22, 2025
Malware in internal-plugin-telemetry-backend
1 compromised version
- Jul 22, 2025
Malicious code in sha256-validator-pack (npm)
2 compromised versions
- Jul 22, 2025
Malicious code in sha256-pack (npm)
- Jul 22, 2025
Malware in sha256-validator-pack
1 compromised version
- Jul 22, 2025
Malware in sha256-pack
1 compromised version
- Jul 22, 2025
Malicious code in nestjs-io-helper (npm)
- Jul 22, 2025
Malware in nestjs-io-helper
1 compromised version
- Jul 22, 2025
Malicious code in kiwi-module-recommendations (npm)
- Jul 22, 2025
Malware in kiwi-module-recommendations
1 compromised version
- Jul 22, 2025
Malicious code in kiwi-shared (npm)
- Jul 22, 2025
Malicious code in kiwi-module-seo-featured (npm)
- Jul 22, 2025
Malicious code in kiwi-module-search (npm)
- Jul 22, 2025
Malicious code in kiwi-module-cdp (npm)
- Jul 22, 2025
Malicious code in kiwi-module-browse (npm)
- Jul 22, 2025
Malware in kiwi-module-search
1 compromised version
- Jul 22, 2025
Malware in kiwi-module-browse
1 compromised version
- Jul 22, 2025
Malware in kiwi-module-seo-featured
1 compromised version
- Jul 22, 2025
Malware in @shadowmonarchx/eslint_plugin_react
1 compromised version
- Jul 22, 2025
Malware in kiwi-shared
1 compromised version
- Jul 22, 2025
Malware in kiwi-module-cdp
1 compromised version
- Jul 22, 2025
Malicious code in internallib_v730 (npm)
- Jul 22, 2025
Malicious code in internallib_v687 (npm)
- Jul 22, 2025
Malware in internallib_v687
1 compromised version
- Jul 22, 2025
Malware in internallib_v730
1 compromised version
Page 5805 of 6,634