Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 15, 2025
Malware in acios.js
1 compromised version
- Jul 15, 2025
Malware in axio.js
1 compromised version
- Jul 15, 2025
Malware in wrb3
1 compromised version
- Jul 15, 2025
Malware in @b10902118/note-xss-payload
1 compromised version
- Jul 15, 2025
Malicious code in react-redirect-router (npm)
- Jul 15, 2025
Malware in react-redirect-router
1 compromised version
- Jul 15, 2025
Malware in seller-assistant-commons-fe
1 compromised version
- Jul 15, 2025
Malware in pricing-simulator-lib
1 compromised version
- Jul 15, 2025
Malware in reauthentication-node-sdk
1 compromised version
- Jul 15, 2025
Malicious code in node-mongo-orm (npm)
- Jul 15, 2025
Malware in node-mongo-orm
1 compromised version
- Jul 15, 2025
Malicious code in nextjs-package-purify (npm)
- Jul 15, 2025
Malicious code in nextjs-https-supertest (npm)
- Jul 15, 2025
Malware in nextjs-https-supertest
1 compromised version
- Jul 15, 2025
Malware in nextjs-package-purify
1 compromised version
- Jul 15, 2025
Malicious code in jsonslicer (npm)
- Jul 15, 2025
Malware in jsonslicer
1 compromised version
- Jul 15, 2025
Malicious code in string-parser-utils (npm)
2 compromised versions
- Jul 15, 2025
Malicious code in shared-workflows (npm)
- Jul 15, 2025
Malicious code in loki-release (npm)
- Jul 15, 2025
Malicious code in lezer-promql-tree-viz (npm)
- Jul 15, 2025
Malicious code in grafana-strava-datasource (npm)
- Jul 15, 2025
Malicious code in grafana-amazonprometheus-datasource (npm)
- Jul 15, 2025
Malicious code in ezer-promql-tree-viz (npm)
- Jul 15, 2025
Malicious code in agent-configurator (npm)
- Jul 15, 2025
Malware in grafana-lokiexplore-app
1 compromised version
- Jul 15, 2025
Malware in loki-release
1 compromised version
- Jul 15, 2025
Malware in pyroscope-nodejs
1 compromised version
- Jul 15, 2025
Malware in k6-studio
1 compromised version
- Jul 15, 2025
Malware in grafana-amazonprometheus-datasource
1 compromised version
- Jul 15, 2025
Malware in shared-workflows
1 compromised version
- Jul 15, 2025
Malware in grafana-strava-datasource
1 compromised version
- Jul 15, 2025
Malware in lezer-promql-tree-viz
1 compromised version
- Jul 15, 2025
Malware in ezer-promql-tree-viz
1 compromised version
- Jul 15, 2025
Malware in agent-configurator
1 compromised version
- Jul 15, 2025
Malware in string-parser-utils
1 compromised version
- Jul 15, 2025
Malware in helioviewer.org
1 compromised version
- Jul 15, 2025
Malicious code in what_type_of_self_indulgent_sub-par_challenge_is_this (npm)
2 compromised versions
- Jul 15, 2025
Malicious code in pxsceneui-example-03 (npm)
- Jul 15, 2025
Malicious code in istio-feeder (npm)
- Jul 15, 2025
Malicious code in dark-switch (npm)
- Jul 15, 2025
Malware in istio-feeder
1 compromised version
- Jul 15, 2025
Malware in comcastapp
1 compromised version
- Jul 15, 2025
Malware in dark-switch
1 compromised version
- Jul 15, 2025
Malware in what_type_of_self_indulgent_sub-par_challenge_is_this
1 compromised version
- Jul 15, 2025
Malware in pxsceneui-example-03
1 compromised version
- Jul 15, 2025
Malware in baileys-cleaner
1 compromised version
- Jul 15, 2025
Malicious code in @vapc-ui/search-box (npm)
- Jul 15, 2025
Malicious code in @vapc-ui/font-icon (npm)
- Jul 15, 2025
Malicious code in @cpce/console-sub-app (npm)
Page 5813 of 6,634