Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 15, 2025
Malicious code in gift-chii-true (npm)
- Jul 15, 2025
Malicious code in boost-chii-90 (npm)
- Jul 15, 2025
Malware in boost-chii-90
1 compromised version
- Jul 15, 2025
Malware in gift-chii-true
1 compromised version
- Jul 15, 2025
Malware in bg-core-payments-automation
1 compromised version
- Jul 15, 2025
Malicious code in webvieweventtest (npm)
- Jul 15, 2025
Malicious code in vss-web-auth-client (npm)
- Jul 15, 2025
Malicious code in ts-immutable-sdk (npm)
- Jul 15, 2025
Malicious code in square-crypto-utils-internal (npm)
- Jul 15, 2025
Malicious code in okta-ui-private-components (npm)
- Jul 15, 2025
Malicious code in neolang-ui (npm)
- Jul 15, 2025
Malicious code in iron-github-io (npm)
- Jul 15, 2025
Malicious code in bombora (npm)
- Jul 15, 2025
Malicious code in appcenter-sampleapp-react-native (npm)
- Jul 15, 2025
Malicious code in ai-gallery (npm)
- Jul 15, 2025
Malicious code in ado-codespaces-auth (npm)
- Jul 15, 2025
Malware in okta-ui-private-components
1 compromised version
- Jul 15, 2025
Malware in ts-immutable-sdk
1 compromised version
- Jul 15, 2025
Malware in iron-github-io
1 compromised version
- Jul 15, 2025
Malware in vss-web-auth-client
1 compromised version
- Jul 15, 2025
Malware in atlascode
1 compromised version
- Jul 15, 2025
Malware in square-crypto-utils-internal
1 compromised version
- Jul 15, 2025
Malware in ado-codespaces-auth
1 compromised version
- Jul 15, 2025
Malware in ardiffact
1 compromised version
- Jul 15, 2025
Malware in appcenter-sampleapp-react-native
1 compromised version
- Jul 15, 2025
Malware in dot-net-interactive-kernels
1 compromised version
- Jul 15, 2025
Malware in ai-gallery
1 compromised version
- Jul 15, 2025
Malware in bombora
1 compromised version
- Jul 15, 2025
Malware in webvieweventtest
1 compromised version
- Jul 15, 2025
Malware in neolang-ui
1 compromised version
- Jul 14, 2025
Malicious code in symphony-cryptolib (npm)
1 compromised version
- Jul 14, 2025
Malicious code in ltiditest2 (npm)
- Jul 14, 2025
Malicious code in ltiditest (npm)
- Jul 14, 2025
Malicious code in @yinc/ui (npm)
- Jul 14, 2025
Malicious code in @subsplash/auth (npm)
- Jul 14, 2025
Malicious code in @stride-mfe/wmc (npm)
- Jul 14, 2025
Malicious code in @sfdc-ogs/v1-stable (npm)
- Jul 14, 2025
Malicious code in @segmentation/gf2fov (npm)
- Jul 14, 2025
Malicious code in @rev-security/identity-rev (npm)
- Jul 14, 2025
Malicious code in @happyfoxinc/react-ui (npm)
- Jul 14, 2025
Malicious code in @gmgn/app-icons (npm)
1 compromised version
- Jul 14, 2025
Malicious code in @didi-pebble/pblint (npm)
2 compromised versions
- Jul 14, 2025
Malicious code in @cewe-designsystem/component_modal (npm)
1 compromised version
- Jul 14, 2025
Malicious code in @cbre-internal/mapping-component (npm)
1 compromised version
- Jul 14, 2025
Malware in @didi-pebble/pblint
1 compromised version
- Jul 14, 2025
Malware in @happyfoxinc/react-ui
1 compromised version
- Jul 14, 2025
Malware in @rev-security/identity-rev
1 compromised version
- Jul 14, 2025
Malware in @cewe-designsystem/component_modal
1 compromised version
- Jul 14, 2025
Malware in @segmentation/gf2fov
1 compromised version
- Jul 14, 2025
Malware in symphony-cryptolib
1 compromised version
Page 5815 of 6,634