Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 10, 2025
Malware in hubspot-cms-deploy
1 compromised version
- Jul 10, 2025
Malware in example-target-package
1 compromised version
- Jul 10, 2025
Malware in comment-on-task-github-action
1 compromised version
- Jul 10, 2025
Malware in dradis
1 compromised version
- Jul 10, 2025
Malware in pkgsite
1 compromised version
- Jul 10, 2025
Malicious code in preview-server-auth-test (npm)
- Jul 10, 2025
Malicious code in preview-server-auth (npm)
- Jul 10, 2025
Malicious code in @tui-react-internal/select-account-icon (npm)
- Jul 10, 2025
Malicious code in os-apps-ui-portal (npm)
1 compromised version
- Jul 10, 2025
Malicious code in os-apps-ui-placement-manager (npm)
- Jul 10, 2025
Malicious code in cookiefunctions (npm)
2 compromised versions
- Jul 10, 2025
Malicious code in nbastatsleftnav (npm)
2 compromised versions
- Jul 10, 2025
Malware in rippling-marketing-site
1 compromised version
- Jul 10, 2025
Malware in paysafe-wac-web-2fa-lib-fe
1 compromised version
- Jul 10, 2025
Malware in @paysafe-consumer/authentication
1 compromised version
- Jul 10, 2025
Malware in bazel-kotlin
1 compromised version
- Jul 10, 2025
Malware in epic-mw
1 compromised version
- Jul 10, 2025
Malware in @frontend-clients/wallet-web
1 compromised version
- Jul 10, 2025
Malware in @frontend-clients/core
1 compromised version
- Jul 10, 2025
Malicious code in dex-core-v2 (npm)
- Jul 10, 2025
Malware in lz-evm-sdk-v1
1 compromised version
- Jul 10, 2025
Malware in dex-core-v2
1 compromised version
- Jul 10, 2025
Malware in oft-evm
1 compromised version
- Jul 10, 2025
Malware in lz-evm-protocol-v2
1 compromised version
- Jul 10, 2025
Malicious code in @blocks-shared/atom-panel (npm)
1 compromised version
- Jul 10, 2025
Malicious code in npmrcetest (npm)
1 compromised version
- Jul 10, 2025
Malicious code in os-apps-ui-creative-manager (npm)
1 compromised version
- Jul 10, 2025
Malicious code in @shadowmonarchx/eslint_plugin_react (npm)
1 compromised version
- Jul 10, 2025
Malicious code in os-apps-ui-traffic-manager (npm)
2 compromised versions
- Jul 10, 2025
Malicious code in dep-confusion-poc-monke (npm)
- Jul 10, 2025
Malicious code in ec2-github-runner (npm)
- Jul 10, 2025
Malware in ec2-github-runner
1 compromised version
- Jul 10, 2025
Malicious code in tv-app (npm)
- Jul 10, 2025
Malicious code in sqltools-kusto-driver (npm)
- Jul 10, 2025
Malicious code in nmig (npm)
- Jul 10, 2025
Malicious code in k6-studio-ui-components (npm)
- Jul 10, 2025
Malicious code in intel-telemetry (npm)
- Jul 10, 2025
Malicious code in intel-gdb-helpers (npm)
- Jul 10, 2025
Malicious code in imx-core-sdk (npm)
- Jul 10, 2025
Malicious code in grafana-zabbix (npm)
- Jul 10, 2025
Malicious code in grafana-polystat-panel (npm)
- Jul 10, 2025
Malicious code in grafana-csv-datasource (npm)
- Jul 10, 2025
Malicious code in dt-internal-linter (npm)
- Jul 10, 2025
Malicious code in dt-automation-core (npm)
- Jul 10, 2025
Malicious code in dependabot-ruleset-runner (npm)
- Jul 10, 2025
Malicious code in clock-panel (npm)
- Jul 10, 2025
Malicious code in azure-prometheus-datasource (npm)
- Jul 10, 2025
Malicious code in azure-data-explorer-datasource (npm)
- Jul 10, 2025
Malicious code in astradb-datasource (npm)
- Jul 10, 2025
Malware in dt-internal-linter
1 compromised version
Page 5818 of 6,634