Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 8, 2025
Malware in caglass
1 compromised version
- Jul 8, 2025
Malware in mapbox-gl-js
1 compromised version
- Jul 8, 2025
Malware in action_dropdown
1 compromised version
- Jul 8, 2025
Malware in ca-ui-carbon-toolkit
1 compromised version
- Jul 8, 2025
Malware in betsson
1 compromised version
- Jul 8, 2025
Malware in sizings
1 compromised version
- Jul 8, 2025
Malware in fe-hoc-theme
1 compromised version
- Jul 8, 2025
Malware in confluence-ui-components
1 compromised version
- Jul 8, 2025
Malware in log-styles
1 compromised version
- Jul 8, 2025
Malware in vwa-visualizer
1 compromised version
- Jul 8, 2025
Malware in fe-lib-localstorage
1 compromised version
- Jul 8, 2025
Malware in ee_else_ce
1 compromised version
- Jul 8, 2025
Malware in baglass
1 compromised version
- Jul 8, 2025
Malware in confluence-drag-and-drop
1 compromised version
- Jul 8, 2025
Malware in fe-comp-input-text-core
1 compromised version
- Jul 8, 2025
Malware in fe-lib-store
1 compromised version
- Jul 8, 2025
Malware in sweet-bananas
1 compromised version
- Jul 8, 2025
Malware in data-layers
1 compromised version
- Jul 8, 2025
Malware in core_filters
1 compromised version
- Jul 8, 2025
Malware in confluence-inline-tasks
1 compromised version
- Jul 8, 2025
Malicious code in web-shell-core (npm)
- Jul 8, 2025
Malware in assets-atlas-editor
1 compromised version
- Jul 8, 2025
Malware in bootstrap-modules
1 compromised version
- Jul 8, 2025
Malware in jsmdc
1 compromised version
- Jul 8, 2025
Malware in animations.less
1 compromised version
- Jul 8, 2025
Malware in web-shell-core
1 compromised version
- Jul 8, 2025
Malware in styled-components-react18-v5
1 compromised version
- Jul 8, 2025
Malware in smart-attachments
1 compromised version
- Jul 8, 2025
Malware in cf-install
1 compromised version
- Jul 8, 2025
Malware in media_videojs
1 compromised version
- Jul 8, 2025
Malicious code in foundation.util.triggers.js (npm)
- Jul 8, 2025
Malware in foundation.util.triggers.js
1 compromised version
- Jul 8, 2025
Malicious code in data-formatter-pro (npm)
- Jul 8, 2025
Malware in core_block
1 compromised version
- Jul 8, 2025
Malware in data-formatter-pro
1 compromised version
- Jul 8, 2025
Malware in alicn
1 compromised version
- Jul 8, 2025
Malware in work_app
1 compromised version
- Jul 8, 2025
Malware in bar.app.bar_rights
1 compromised version
- Jul 8, 2025
Malicious code in @jmerhi-atl/evil (npm)
- Jul 8, 2025
Malware in @jmerhi-atl/evil
1 compromised version
- Jul 8, 2025
Malicious code in solsafe (npm)
2 compromised versions
- Jul 8, 2025
Malware in solsafe
1 compromised version
- Jul 8, 2025
Malicious code in react-smoothy-plugin (npm)
- Jul 8, 2025
Malware in react-smoothy-plugin
1 compromised version
- Jul 8, 2025
Malicious code in prepare-config (npm)
- Jul 8, 2025
Malware in prepare-config
1 compromised version
- Jul 8, 2025
Malicious code in internallib_v555 (npm)
- Jul 8, 2025
Malware in internallib_v555
1 compromised version
- Jul 8, 2025
Malicious code in chii-aungpao-new (npm)
- Jul 8, 2025
Malicious code in boost-chii-90s (npm)
5 compromised versions
Page 5823 of 6,634