Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 15, 2025
Malware in grabcad-printers-api
1 compromised version
- Jul 15, 2025
Malware in angieslist-office-app-common
1 compromised version
- Jul 15, 2025
Malware in worldapp-fe-utils
1 compromised version
- Jul 15, 2025
Malicious code in cloud-binary (npm)
- Jul 15, 2025
Malware in cloud-binary
1 compromised version
- Jul 15, 2025
Malicious code in modern-react (npm)
- Jul 15, 2025
Malware in modern-react
1 compromised version
- Jul 15, 2025
Malicious code in apple-keto-acv-gummies (npm)
- Jul 15, 2025
Malware in apple-keto-acv-gummies
1 compromised version
- Jul 15, 2025
Malicious code in white-oganesson (npm)
- Jul 15, 2025
Malicious code in lime-thulium (npm)
- Jul 15, 2025
Malicious code in cmc-inferno (npm)
- Jul 15, 2025
Malicious code in blue-einsteinium (npm)
- Jul 15, 2025
Malware in blue-einsteinium
1 compromised version
- Jul 15, 2025
Malware in lime-thulium
1 compromised version
- Jul 15, 2025
Malware in cmc-inferno
1 compromised version
- Jul 15, 2025
Malware in white-oganesson
1 compromised version
- Jul 15, 2025
Malicious code in ecinc-cloud-moaxmpp (npm)
2 compromised versions
- Jul 15, 2025
Malicious code in paypal-invoicing (npm)
2 compromised versions
- Jul 15, 2025
Malicious code in crypto-notifier (npm)
- Jul 15, 2025
Malware in crypto-notifier
1 compromised version
- Jul 15, 2025
Malicious code in telegram-pk-auto-sender (npm)
- Jul 15, 2025
Malware in telegram-pk-auto-sender
1 compromised version
- Jul 15, 2025
Malicious code in web3js-wallet (npm)
92 compromised versions
- Jul 15, 2025
Malware in web3js-wallet
1 compromised version
- Jul 15, 2025
Malicious code in date-fns-2 (npm)
- Jul 15, 2025
Malicious code in public-tools-and-demos (npm)
2 compromised versions
- Jul 15, 2025
Malicious code in @ivy-shared-components/iconslibrary (npm)
3 compromised versions
- Jul 15, 2025
Malicious code in node-mongodb-logger (npm)
- Jul 15, 2025
Malware in node-mongodb-logger
1 compromised version
- Jul 15, 2025
Malicious code in pino-req (npm)
- Jul 15, 2025
Malicious code in parser-query (npm)
- Jul 15, 2025
Malware in parser-query
1 compromised version
- Jul 15, 2025
Malware in pino-req
1 compromised version
- Jul 15, 2025
Malicious code in vite-lightparse (npm)
- Jul 15, 2025
Malware in vite-lightparse
1 compromised version
- Jul 15, 2025
Malicious code in tailwind-base-theme (npm)
- Jul 15, 2025
Malware in tailwind-base-theme
1 compromised version
- Jul 15, 2025
Malicious code in tailwind-config-plugin (npm)
- Jul 15, 2025
Malware in tailwind-config-plugin
1 compromised version
- Jul 15, 2025
Malicious code in vite-proc-log (npm)
- Jul 15, 2025
Malware in vite-proc-log
1 compromised version
- Jul 15, 2025
Malicious code in cronek (npm)
- Jul 15, 2025
Malware in cronek
1 compromised version
- Jul 15, 2025
Malicious code in vite-log-handler (npm)
- Jul 15, 2025
Malware in vite-log-handler
1 compromised version
- Jul 15, 2025
Malicious code in proc-logger (npm)
- Jul 15, 2025
Malware in proc-logger
1 compromised version
- Jul 15, 2025
Malicious code in flowframe (npm)
- Jul 15, 2025
Malware in flowframe
1 compromised version
Page 5811 of 6,634