Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 8, 2025
Malware in geothmetic-meandian
1 compromised version
- Jul 8, 2025
Malware in cdk8s-kbld
1 compromised version
- Jul 8, 2025
Malicious code in airbnb-rootkit-wow (npm)
- Jul 8, 2025
Malware in airbnb-rootkit-wow
1 compromised version
- Jul 8, 2025
Malware in secure-r007k17
1 compromised version
- Jul 8, 2025
Malicious code in santa-barbara-weather-utils (npm)
- Jul 8, 2025
Malware in santa-barbara-weather-utils
1 compromised version
- Jul 8, 2025
Malicious code in my-js-cdn (npm)
- Jul 8, 2025
Malware in my-js-cdn
1 compromised version
- Jul 8, 2025
Malicious code in kkyun-display-flag (npm)
- Jul 8, 2025
Malware in kkyun-xss-payload
1 compromised version
- Jul 8, 2025
Malware in kkyun-display-flag
1 compromised version
- Jul 8, 2025
Malware in jun-xss-payload
1 compromised version
- Jul 8, 2025
Malware in webengage
1 compromised version
- Jul 8, 2025
Malware in zd-cms
1 compromised version
- Jul 8, 2025
Malware in profile-page-app
1 compromised version
- Jul 8, 2025
Malware in event.custom
1 compromised version
- Jul 8, 2025
Malware in sap.ushell.components.tiles.utils
1 compromised version
- Jul 8, 2025
Malware in kwp-client
1 compromised version
- Jul 8, 2025
Malicious code in your-test-renderer (npm)
- Jul 8, 2025
Malicious code in product_card_grid (npm)
- Jul 8, 2025
Malicious code in appf-react-router-dom (npm)
- Jul 8, 2025
Malware in discourse-mf
1 compromised version
- Jul 8, 2025
Malware in ironrouter
1 compromised version
- Jul 8, 2025
Malware in list_column_item
1 compromised version
- Jul 8, 2025
Malware in appf-react-router-dom
1 compromised version
- Jul 8, 2025
Malware in jira-triggers
1 compromised version
- Jul 8, 2025
Malware in confluence-macro-browser
1 compromised version
- Jul 8, 2025
Malware in zplex
1 compromised version
- Jul 8, 2025
Malware in htmlbars-inline-precompile
1 compromised version
- Jul 8, 2025
Malware in category_textured_background
1 compromised version
- Jul 8, 2025
Malware in your-test-renderer
1 compromised version
- Jul 8, 2025
Malware in price_wrapper
1 compromised version
- Jul 8, 2025
Malware in jira-agile
1 compromised version
- Jul 8, 2025
Malware in jira-dashboard-items
1 compromised version
- Jul 8, 2025
Malware in pbr-client
1 compromised version
- Jul 8, 2025
Malware in product_card_grid
1 compromised version
- Jul 8, 2025
Malware in jira-help-tips
1 compromised version
- Jul 8, 2025
Malware in io.ox
1 compromised version
- Jul 8, 2025
Malware in company-secret-lib
1 compromised version
- Jul 8, 2025
Malware in webgl-fingerprinting
1 compromised version
- Jul 8, 2025
Malware in callsign-async-runner
1 compromised version
- Jul 8, 2025
Malware in govuk_frontend_alpha
1 compromised version
- Jul 8, 2025
Malware in codesandbox-deps
1 compromised version
- Jul 8, 2025
Malware in pkg-dev-deps-only
1 compromised version
- Jul 8, 2025
Malware in aws-sdk-react-native-core
1 compromised version
- Jul 8, 2025
Malicious code in fe-lib-store (npm)
- Jul 8, 2025
Malicious code in fe-lib-localstorage (npm)
- Jul 8, 2025
Malicious code in fe-hoc-theme (npm)
- Jul 8, 2025
Malicious code in fe-comp-input-text-core (npm)
Page 5822 of 6,634