Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 8, 2025
Malware in boost-chii-90s
1 compromised version
- Jul 8, 2025
Malware in chii-aungpao-new
1 compromised version
- Jul 8, 2025
Malicious code in @instant-postgres/neon (npm)
- Jul 8, 2025
Malware in @instant-postgres/neon
1 compromised version
- Jul 8, 2025
Malicious code in @bosch-rollouts-extensions/soup (npm)
- Jul 8, 2025
Malware in @bosch-rollouts-extensions/soup
1 compromised version
- Jul 8, 2025
Malicious code in @bosch-iot-console/rollouts (npm)
1 compromised version
- Jul 8, 2025
Malicious code in @bosch-iot-console/monorepo (npm)
- Jul 8, 2025
Malware in @bosch-iot-console/rollouts
1 compromised version
- Jul 8, 2025
Malware in @bosch-iot-console/monorepo
1 compromised version
- Jul 8, 2025
Malicious code in vite-tsauditlog (npm)
- Jul 8, 2025
Malware in vite-tsauditlog
1 compromised version
- Jul 8, 2025
Malicious code in jsonskipy (npm)
- Jul 8, 2025
Malware in jsonskipy
1 compromised version
- Jul 8, 2025
Malicious code in restpilot (npm)
- Jul 8, 2025
Malware in restpilot
1 compromised version
- Jul 8, 2025
Malware in calling-an-api
1 compromised version
- Jul 8, 2025
Malware in protobufjs-websocket-example
1 compromised version
- Jul 8, 2025
Malware in systemjs-builder-test
1 compromised version
- Jul 8, 2025
Malware in with-next-intl
1 compromised version
- Jul 8, 2025
Malware in web-app-express
1 compromised version
- Jul 8, 2025
Malware in rjs-test
1 compromised version
- Jul 8, 2025
Malware in lunasec-sdks
1 compromised version
- Jul 8, 2025
Malware in oauth2-bearer
1 compromised version
- Jul 8, 2025
Malware in react-fixtures-ssr
1 compromised version
- Jul 8, 2025
Malware in protobufjs-protify-example
1 compromised version
- Jul 8, 2025
Malware in auth0-app
1 compromised version
- Jul 8, 2025
Malware in cra-react-router
1 compromised version
- Jul 8, 2025
Malware in auth0-styleguide-website
1 compromised version
- Jul 8, 2025
Malware in with-shadcn
1 compromised version
- Jul 8, 2025
Malware in token-renewal
1 compromised version
- Jul 8, 2025
Malware in frontend-redux
1 compromised version
- Jul 8, 2025
Malicious code in io.ox (npm)
- Jul 8, 2025
Malicious code in zplex (npm)
- Jul 8, 2025
Malicious code in pbr-client (npm)
- Jul 8, 2025
Malicious code in htmlbars-inline-precompile (npm)
- Jul 8, 2025
Malicious code in laredoute (npm)
- Jul 8, 2025
Malicious code in rambler-id (npm)
1 compromised version
- Jul 8, 2025
Malicious code in fxa-admin-panel (npm)
- Jul 7, 2025
Malicious code in ru.rustore.core (npm)
1 compromised version
- Jul 7, 2025
Malicious code in @laredoute/design-tokens (npm)
2 compromised versions
- Jul 7, 2025
Malicious code in @virtru-private/infer-web-env (npm)
2 compromised versions
- Jul 7, 2025
Malicious code in @subdashboard/shared (npm)
1 compromised version
- Jul 6, 2025
Malicious code in securityresearchpocaplmalpkg (npm)
1 compromised version
- Jul 6, 2025
Malicious code in @rupahealth/design (npm)
1 compromised version
- Jul 6, 2025
Malicious code in jenkins-for-jira-ui (npm)
1 compromised version
- Jul 6, 2025
Malicious code in corplogger (npm)
1 compromised version
- Jul 6, 2025
Malicious code in vsts-iiswebapp (npm)
1 compromised version
- Jul 6, 2025
Malicious code in notificationsandbox (npm)
1 compromised version
- Jul 6, 2025
Malicious code in chia-dev-guides (npm)
1 compromised version
Page 5824 of 6,634