Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 16, 2025
Malware in dom-navigation
1 compromised version
- Jul 16, 2025
Malicious code in okta-core-component (npm)
- Jul 16, 2025
Malicious code in cwttools1 (npm)
1 compromised version
- Jul 16, 2025
Malicious code in hrxtable (npm)
6 compromised versions
- Jul 16, 2025
Malicious code in blocknote-editor (npm)
8 compromised versions
- Jul 16, 2025
Malicious code in @hub-la/payments-proto (npm)
1 compromised version
- Jul 16, 2025
Malicious code in xeno-code (npm)
- Jul 16, 2025
Malware in xeno-code
1 compromised version
- Jul 16, 2025
Malicious code in yxt-open-data (npm)
1 compromised version
- Jul 16, 2025
Malicious code in rollup-linux-riscv64-gnu (npm)
- Jul 16, 2025
Malicious code in ifood-companies-manager-front (npm)
1 compromised version
- Jul 16, 2025
Malicious code in catalyst_lib (npm)
2 compromised versions
- Jul 15, 2025
Malicious code in zeus-mex-profile-viz (npm)
- Jul 15, 2025
Malicious code in @web-kit-package/grab-login (npm)
- Jul 15, 2025
Malicious code in @gdstudio/web-loader (npm)
- Jul 15, 2025
Malicious code in @gdcorp-digitalcare/ux-common (npm)
- Jul 15, 2025
Malicious code in @gdcorp-digitalcare/ux (npm)
- Jul 15, 2025
Malicious code in @gdcorp-commerce/cx-router (npm)
- Jul 15, 2025
Malicious code in @gdcorp-commerce/cx-page-container (npm)
- Jul 15, 2025
Malicious code in @gdcorp-commerce/cx-orders (npm)
- Jul 15, 2025
Malicious code in @gdcorp-commerce/cx-event-tracker (npm)
- Jul 15, 2025
Malicious code in @gdcorp-commerce/cx-api-connect (npm)
- Jul 15, 2025
Malicious code in @forge-ui-components/media-player (npm)
- Jul 15, 2025
Malicious code in @ecommerce-cart-ui/client (npm)
- Jul 15, 2025
Malware in @ecommerce-cart-ui/client
1 compromised version
- Jul 15, 2025
Malware in @gdcorp-digitalcare/ux-common
1 compromised version
- Jul 15, 2025
Malware in @gdcorp-commerce/cx-event-tracker
1 compromised version
- Jul 15, 2025
Malware in @gdcorp-commerce/cx-orders
1 compromised version
- Jul 15, 2025
Malware in zeus-mex-profile-viz
1 compromised version
- Jul 15, 2025
Malware in @gdstudio/web-loader
1 compromised version
- Jul 15, 2025
Malware in @gdcorp-digitalcare/ux
1 compromised version
- Jul 15, 2025
Malware in @gdcorp-commerce/cx-api-connect
1 compromised version
- Jul 15, 2025
Malware in @forge-ui-components/media-player
1 compromised version
- Jul 15, 2025
Malware in @gdcorp-commerce/cx-page-container
1 compromised version
- Jul 15, 2025
Malware in @web-kit-package/grab-login
1 compromised version
- Jul 15, 2025
Malware in @gdcorp-commerce/cx-router
1 compromised version
- Jul 15, 2025
Malicious code in worldapp-ui (npm)
- Jul 15, 2025
Malicious code in worldapp-fe-utils (npm)
- Jul 15, 2025
Malicious code in grabcad-ui-elements (npm)
- Jul 15, 2025
Malicious code in grabcad-printers-api (npm)
- Jul 15, 2025
Malicious code in enterprise-stencil (npm)
- Jul 15, 2025
Malicious code in angieslist-office-app-common (npm)
- Jul 15, 2025
Malicious code in affirm-stories (npm)
- Jul 15, 2025
Malware in affirm-stories
1 compromised version
- Jul 15, 2025
Malware in enterprise-stencil
1 compromised version
- Jul 15, 2025
Malware in gs-uitk-analytics-common
1 compromised version
- Jul 15, 2025
Malware in worldapp-ui
1 compromised version
- Jul 15, 2025
Malware in gs-pwm-utilities
1 compromised version
- Jul 15, 2025
Malware in grabcad-ui-elements
1 compromised version
- Jul 15, 2025
Malware in gs-uitk-set-utils
1 compromised version
Page 5810 of 6,634