Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 12, 2025
Malicious code in openai-voice-agent-sdk-sample (npm)
- Jul 12, 2025
Malicious code in realtime-next (npm)
- Jul 12, 2025
Malicious code in tw-core-ui (npm)
2 compromised versions
- Jul 12, 2025
Malicious code in google-fishbones-poc (npm)
- Jul 12, 2025
Malicious code in dom-navigation (npm)
- Jul 12, 2025
Malicious code in @3kali182/selenium-webdriver4 (npm)
- Jul 12, 2025
Malicious code in spl-token-v2 (npm)
- Jul 12, 2025
Malicious code in matka (npm)
1 compromised version
- Jul 12, 2025
Malicious code in @blocks-shared/desktop-title (npm)
- Jul 11, 2025
Malicious code in groq-link2 (npm)
2 compromised versions
- Jul 11, 2025
Malicious code in @lensapp/eslint-config (npm)
1 compromised version
- Jul 11, 2025
Malicious code in @3kali182/angular-1.6 (npm)
1 compromised version
- Jul 11, 2025
Malicious code in coverage-v8 (npm)
1 compromised version
- Jul 11, 2025
Malicious code in @pwa-ib/eslint-plugin-compat (npm)
1 compromised version
- Jul 11, 2025
Malicious code in @h1shiny/ismobile (npm)
1 compromised version
- Jul 11, 2025
Malicious code in preview-server-auth-bounty (npm)
- Jul 10, 2025
Malicious code in preset-log (npm)
- Jul 10, 2025
Malware in preset-log
1 compromised version
- Jul 10, 2025
Malicious code in dtcp-module (npm)
1 compromised version
- Jul 10, 2025
Malware in dtcp-module
1 compromised version
- Jul 10, 2025
Malware in sdk.babeltest
1 compromised version
- Jul 10, 2025
Malware in sdk.babelhelpz
1 compromised version
- Jul 10, 2025
Malware in byaziine_validator
1 compromised version
- Jul 10, 2025
Malicious code in rita-remoteista (npm)
1 compromised version
- Jul 10, 2025
Malicious code in esign-frontend (npm)
1 compromised version
- Jul 10, 2025
Malware in rita-remoteista
1 compromised version
- Jul 10, 2025
Malware in @subdashboard/shared
1 compromised version
- Jul 10, 2025
Malware in esign-frontend
1 compromised version
- Jul 10, 2025
Malicious code in tyrtle (npm)
- Jul 10, 2025
Malicious code in teeble (npm)
- Jul 10, 2025
Malicious code in supabase-react (npm)
- Jul 10, 2025
Malicious code in sandbox-plugin (npm)
- Jul 10, 2025
Malicious code in sample-nuxtjs (npm)
- Jul 10, 2025
Malicious code in pkgsite (npm)
- Jul 10, 2025
Malicious code in jquery-zoomer (npm)
- Jul 10, 2025
Malicious code in hubspot-cms-deploy (npm)
- Jul 10, 2025
Malicious code in grallama (npm)
- Jul 10, 2025
Malicious code in dradis (npm)
- Jul 10, 2025
Malicious code in comment-on-task-github-action (npm)
- Jul 10, 2025
Malware in sandbox-plugin
1 compromised version
- Jul 10, 2025
Malware in grallama
1 compromised version
- Jul 10, 2025
Malware in jquery-zoomer
1 compromised version
- Jul 10, 2025
Malware in workflows-templates
1 compromised version
- Jul 10, 2025
Malware in supabase-react
1 compromised version
- Jul 10, 2025
Malware in cmr-stac
1 compromised version
- Jul 10, 2025
Malware in cmr-graphql
1 compromised version
- Jul 10, 2025
Malware in sample-nuxtjs
1 compromised version
- Jul 10, 2025
Malware in teeble
1 compromised version
- Jul 10, 2025
Malware in tyrtle
1 compromised version
- Jul 10, 2025
Malware in workflows-template
1 compromised version
Page 5817 of 6,634