Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 10, 2025
Malware in intel-gdb-helpers
1 compromised version
- Jul 10, 2025
Malware in dt-automation-core
1 compromised version
- Jul 10, 2025
Malware in sqltools-kusto-driver
1 compromised version
- Jul 10, 2025
Malware in azure-data-explorer-datasource
1 compromised version
- Jul 10, 2025
Malware in sentry-eslint-config-internal
1 compromised version
- Jul 10, 2025
Malware in nmig
1 compromised version
- Jul 10, 2025
Malware in tv-app
1 compromised version
- Jul 10, 2025
Malware in imx-core-sdk
1 compromised version
- Jul 10, 2025
Malware in grafana-polystat-panel
1 compromised version
- Jul 10, 2025
Malware in clock-panel
1 compromised version
- Jul 10, 2025
Malware in astradb-datasource
1 compromised version
- Jul 10, 2025
Malware in github-datasource
1 compromised version
- Jul 10, 2025
Malware in intel-telemetry
1 compromised version
- Jul 10, 2025
Malware in dynatrace-test-automation
1 compromised version
- Jul 10, 2025
Malware in grafana-csv-datasource
1 compromised version
- Jul 10, 2025
Malware in dependabot-ruleset-runner
1 compromised version
- Jul 10, 2025
Malware in azure-prometheus-datasource
1 compromised version
- Jul 10, 2025
Malware in puppetexplorer
1 compromised version
- Jul 10, 2025
Malware in grafana-zabbix
1 compromised version
- Jul 10, 2025
Malware in k6-studio-ui-components
1 compromised version
- Jul 10, 2025
Malware in videoel
1 compromised version
- Jul 10, 2025
Malware in sdk.babelhelpers
1 compromised version
- Jul 10, 2025
Malicious code in yoomoney-github-landing (npm)
1 compromised version
- Jul 10, 2025
Malicious code in tutorial_front (npm)
1 compromised version
- Jul 10, 2025
Malicious code in bugsnag-plugin-react (npm)
- Jul 10, 2025
Malicious code in @frontend-clients/wallet-web (npm)
1 compromised version
- Jul 9, 2025
Malicious code in @nomicsfoundation/web3-sdk (npm)
- Jul 9, 2025
Malicious code in @nomicsfoundation/sdk-test1 (npm)
- Jul 9, 2025
Malware in @nomicsfoundation/web3-sdk
1 compromised version
- Jul 9, 2025
Malware in @nomicsfoundation/sdk-test1
1 compromised version
- Jul 9, 2025
Malicious code in @nomicsfoundation/sdk-test (npm)
- Jul 9, 2025
Malicious code in @nomicsfoundation/hardhat-config (npm)
- Jul 9, 2025
Malware in @nomicsfoundation/sdk-test
1 compromised version
- Jul 9, 2025
Malware in @nomicsfoundation/hardhat-config
1 compromised version
- Jul 9, 2025
Malicious code in @platform-clientextensions/rum-web (npm)
11 compromised versions
- Jul 9, 2025
Malicious code in formatjs-internal-intl (npm)
1 compromised version
- Jul 9, 2025
Malware in titan-exchange-shared
1 compromised version
- Jul 9, 2025
Malware in application-data
1 compromised version
- Jul 9, 2025
Malicious code in win-utils-helper (npm)
6 compromised versions
- Jul 9, 2025
Malware in win-utils-helper
1 compromised version
- Jul 9, 2025
Malicious code in jwoiesk11 (npm)
- Jul 9, 2025
Malicious code in houimlogs22 (npm)
- Jul 9, 2025
Malicious code in homiersla (npm)
- Jul 9, 2025
Malware in homiersla
1 compromised version
- Jul 9, 2025
Malware in jwoiesk11
1 compromised version
- Jul 9, 2025
Malware in houimlogs22
1 compromised version
- Jul 9, 2025
Malicious code in netnodepushlab (npm)
1 compromised version
- Jul 9, 2025
Malware in netnodepushlab
1 compromised version
- Jul 9, 2025
Malicious code in actions-experiment (npm)
1 compromised version
- Jul 9, 2025
Malicious code in dashboard-demo (npm)
Page 5819 of 6,634