Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 20, 2025
Malware in config-log
1 compromised version
- Jul 20, 2025
Malicious code in @nytt/sass-utils (npm)
- Jul 20, 2025
Malicious code in @toptal/picasso-quote (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-slider (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-select (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-link (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-switch (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/davinci-graphql-codegen-extensions (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-form (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-popper (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-button (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-alert (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-dropdown (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-accordion (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-logo (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-paper (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-radio (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-image (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-typography (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-grid (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-icons (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-dropzone (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-container (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-calendar (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/davinci-cloudflare-requests-handler (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @xene/core (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-provider (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-rich-text-editor (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-shared (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-tailwind (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-lab (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-forms (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-charts (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/davinci-monorepo (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso (npm)
1 compromised version
- Jul 20, 2025
Malicious code in creator-portal-web (npm)
- Jul 20, 2025
Malicious code in wc (npm)
- Jul 19, 2025
Malicious code in one-fixed-dep-bins (npm)
5 compromised versions
- Jul 19, 2025
Malicious code in yarn-test-git-repo (npm)
1 compromised version
- Jul 19, 2025
Malicious code in ipp-auth-service-tools (npm)
1 compromised version
- Jul 19, 2025
Malicious code in uid2-ssportal (npm)
- Jul 18, 2025
Malicious code in protolab (npm)
1 compromised version
- Jul 18, 2025
Malicious code in os-apps-ui-curvelibrary1 (npm)
2 compromised versions
- Jul 18, 2025
Malicious code in ably-realtime (npm)
- Jul 18, 2025
Malicious code in everestsystems-content-core (npm)
1 compromised version
- Jul 18, 2025
Malicious code in noya-vaults (npm)
1 compromised version
- Jul 18, 2025
Malicious code in privmx-crypto (npm)
- Jul 18, 2025
Malicious code in hg-icons-2 (npm)
1 compromised version
- Jul 17, 2025
Malware in @jssrv/template
1 compromised version
- Jul 17, 2025
Malware in @lensapp/eslint-config
1 compromised version
Page 5808 of 6,634