Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 22, 2025
Malicious code in fxa-setting (npm)
- Jul 22, 2025
Malware in fxa-auth-server
1 compromised version
- Jul 22, 2025
Malware in fxa-setting
1 compromised version
- Jul 22, 2025
Malware in graphprotocol-tools-monorepo
1 compromised version
- Jul 22, 2025
Malware in playwright-e2e-testing
1 compromised version
- Jul 22, 2025
Malware in fxa-admin-panel
1 compromised version
- Jul 22, 2025
Malware in graphql-commons
1 compromised version
- Jul 22, 2025
Malware in nonsensetest
1 compromised version
- Jul 22, 2025
Malware in consgraphql
1 compromised version
- Jul 22, 2025
Malware in consgraphqlnodeserv
1 compromised version
- Jul 22, 2025
Malicious code in scenes-testing (npm)
- Jul 22, 2025
Malicious code in scenes-e2e (npm)
- Jul 22, 2025
Malicious code in scenes-devtools (npm)
- Jul 22, 2025
Malicious code in scenes-core (npm)
- Jul 22, 2025
Malicious code in lint-pr-title (npm)
- Jul 22, 2025
Malicious code in grafana-scenes-ml (npm)
- Jul 22, 2025
Malicious code in get-latest-workflow-artifact (npm)
- Jul 22, 2025
Malicious code in dependabot-auto-triage (npm)
- Jul 22, 2025
Malicious code in aws-iot-twinmaker-grafana-utils (npm)
- Jul 22, 2025
Malware in scenes-core
1 compromised version
- Jul 22, 2025
Malware in lint-pr-title
1 compromised version
- Jul 22, 2025
Malware in scenes-testing
1 compromised version
- Jul 22, 2025
Malware in scenes-devtools
1 compromised version
- Jul 22, 2025
Malware in aws-iot-twinmaker-grafana-utils
1 compromised version
- Jul 22, 2025
Malware in plugin-meta-extractor
1 compromised version
- Jul 22, 2025
Malware in scenes-e2e
1 compromised version
- Jul 22, 2025
Malware in grafana-scenes-ml
1 compromised version
- Jul 22, 2025
Malware in get-latest-workflow-artifact
1 compromised version
- Jul 22, 2025
Malware in cmc-core
1 compromised version
- Jul 22, 2025
Malware in dependabot-auto-triage
1 compromised version
- Jul 22, 2025
Malicious code in tfjs-vis (npm)
1 compromised version
- Jul 22, 2025
Malicious code in tfjs-backend-nodegl (npm)
3 compromised versions
- Jul 22, 2025
Malicious code in taxify-business-portal (npm)
- Jul 22, 2025
Malicious code in simple-line-icons-webpack (npm)
8 compromised versions
- Jul 22, 2025
Malicious code in ppsdkconstants (npm)
1 compromised version
- Jul 22, 2025
Malicious code in nf-graph-examples (npm)
3 compromised versions
- Jul 22, 2025
Malicious code in mozilla-l10n-docs-linter (npm)
- Jul 22, 2025
Malicious code in fathom-fox (npm)
2 compromised versions
- Jul 22, 2025
Malicious code in community-pass-react-native-wrapper (npm)
4 compromised versions
- Jul 22, 2025
Malicious code in airbnb-shims (npm)
5 compromised versions
- Jul 22, 2025
Malicious code in airbnb-javascript (npm)
- Jul 22, 2025
Malicious code in airbnb-api-resource (npm)
3 compromised versions
- Jul 22, 2025
Malicious code in @verge-vcl-react/empty-state (npm)
9 compromised versions
- Jul 22, 2025
Malicious code in @verge-vcl-react/data-grid (npm)
8 compromised versions
- Jul 22, 2025
Malware in simple-line-icons-webpack
1 compromised version
- Jul 22, 2025
Malware in airbnb-javascript
1 compromised version
- Jul 22, 2025
Malware in mozilla-l10n-docs-linter
1 compromised version
- Jul 22, 2025
Malware in @verge-vcl-react/data-grid
1 compromised version
- Jul 22, 2025
Malware in nf-graph-examples
1 compromised version
- Jul 22, 2025
Malware in taxify-business-portal
1 compromised version
Page 5806 of 6,634