Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 15, 2025
Malicious code in ecom-config (npm)
- Jul 15, 2025
Malware in ecom-config
1 compromised version
- Jul 15, 2025
Malicious code in vite-usageit (npm)
- Jul 15, 2025
Malware in vite-usageit
1 compromised version
- Jul 15, 2025
Malicious code in vite-postcss-tools (npm)
3 compromised versions
- Jul 15, 2025
Malicious code in pretty-chalk (npm)
- Jul 15, 2025
Malware in pretty-chalk
1 compromised version
- Jul 15, 2025
Malware in vite-postcss-tools
1 compromised version
- Jul 15, 2025
Malicious code in querypilot (npm)
- Jul 15, 2025
Malware in querypilot
1 compromised version
- Jul 15, 2025
Malicious code in nodestream-log (npm)
- Jul 15, 2025
Malware in nodestream-log
1 compromised version
- Jul 15, 2025
Malware in mre-config-react
1 compromised version
- Jul 15, 2025
Malware in mre-layout-react
1 compromised version
- Jul 15, 2025
Malicious code in sentry-bundler-plugin-dev (npm)
2 compromised versions
- Jul 15, 2025
Malicious code in scenes-ml-app (npm)
- Jul 15, 2025
Malicious code in okta-template-validator (npm)
1 compromised version
- Jul 15, 2025
Malicious code in jsonloggers (npm)
- Jul 15, 2025
Malicious code in jsonli-conf (npm)
- Jul 15, 2025
Malicious code in healthbottestservice (npm)
- Jul 15, 2025
Malicious code in flpmonitor (npm)
- Jul 15, 2025
Malicious code in dt-retag-lib (npm)
- Jul 15, 2025
Malicious code in artifact-registry-client (npm)
1 compromised version
- Jul 15, 2025
Malicious code in ai-audio-descriptions (npm)
- Jul 15, 2025
Malware in flpmonitor
1 compromised version
- Jul 15, 2025
Malware in sentry-bundler-plugin-dev
1 compromised version
- Jul 15, 2025
Malware in artifact-registry-client
1 compromised version
- Jul 15, 2025
Malware in scenes-ml-app
1 compromised version
- Jul 15, 2025
Malware in definitelytyped-tools
1 compromised version
- Jul 15, 2025
Malware in jsonli-conf
1 compromised version
- Jul 15, 2025
Malware in jsonloggers
1 compromised version
- Jul 15, 2025
Malware in ai-audio-descriptions
1 compromised version
- Jul 15, 2025
Malware in healthbottestservice
1 compromised version
- Jul 15, 2025
Malware in old-header-parser
1 compromised version
- Jul 15, 2025
Malware in okta-template-validator
1 compromised version
- Jul 15, 2025
Malware in dt-retag-lib
1 compromised version
- Jul 15, 2025
Malware in buzzwordcrm
1 compromised version
- Jul 15, 2025
Malicious code in ent-esign-newweb (npm)
1 compromised version
- Jul 15, 2025
Malicious code in bk-card-cc-credit-limit-adjustment-ui (npm)
1 compromised version
- Jul 15, 2025
Malware in bk-card-cc-credit-limit-adjustment-ui
1 compromised version
- Jul 15, 2025
Malware in ent-esign-newweb
1 compromised version
- Jul 15, 2025
Malicious code in wb3 (npm)
- Jul 15, 2025
Malicious code in azios.js (npm)
- Jul 15, 2025
Malware in azios.js
1 compromised version
- Jul 15, 2025
Malware in wb3
1 compromised version
- Jul 15, 2025
Malicious code in wrb3 (npm)
- Jul 15, 2025
Malicious code in axio.js (npm)
- Jul 15, 2025
Malicious code in asios.js (npm)
- Jul 15, 2025
Malicious code in acios.js (npm)
- Jul 15, 2025
Malware in asios.js
1 compromised version
Page 5812 of 6,634