Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 6, 2025
Malicious code in eth-multisig-v4 (npm)
1 compromised version
- Jul 6, 2025
Malicious code in open-source-catalog (npm)
2 compromised versions
- Jul 6, 2025
Malicious code in consgraphql (npm)
1 compromised version
- Jul 6, 2025
Malicious code in pp-react-utils (npm)
3 compromised versions
- Jul 5, 2025
Malicious code in print-vault-node (npm)
1 compromised version
- Jul 5, 2025
Malicious code in mttdocs (npm)
1 compromised version
- Jul 5, 2025
Malicious code in nonsensetest (npm)
2 compromised versions
- Jul 5, 2025
Malicious code in ass-frontend (npm)
1 compromised version
- Jul 5, 2025
Malicious code in protobufjs-protify-example (npm)
- Jul 5, 2025
Malicious code in cra-react-router (npm)
- Jul 5, 2025
Malicious code in glean-mcp-server (npm)
- Jul 5, 2025
Malicious code in bazel-kotlin (npm)
1 compromised version
- Jul 5, 2025
Malicious code in calling-an-api (npm)
1 compromised version
- Jul 5, 2025
Malicious code in token-renewal (npm)
1 compromised version
- Jul 5, 2025
Malicious code in web-app-express (npm)
1 compromised version
- Jul 5, 2025
Malicious code in auth0-styleguide-website (npm)
1 compromised version
- Jul 5, 2025
Malicious code in canonical-bridge-ui (npm)
1 compromised version
- Jul 5, 2025
Malicious code in iwf-typescript-sdk (npm)
1 compromised version
- Jul 5, 2025
Malicious code in cmc-core (npm)
1 compromised version
- Jul 5, 2025
Malicious code in consgraphqlnodeserv (npm)
6 compromised versions
- Jul 5, 2025
Malicious code in graphql-commons (npm)
2 compromised versions
- Jul 5, 2025
Malicious code in internal-utils (npm)
3 compromised versions
- Jul 5, 2025
Malicious code in plugin-meta-extractor (npm)
1 compromised version
- Jul 5, 2025
Malicious code in atlascode (npm)
1 compromised version
- Jul 5, 2025
Malicious code in cmr-graphql (npm)
1 compromised version
- Jul 4, 2025
Malicious code in @super-alpha/api (npm)
- Jul 4, 2025
Malicious code in super-alpha-api (npm)
- Jul 4, 2025
Malicious code in dot-net-interactive-kernels (npm)
- Jul 4, 2025
Malicious code in sentry-eslint-config-internal (npm)
2 compromised versions
- Jul 4, 2025
Malicious code in oauth2-bearer (npm)
- Jul 4, 2025
Malicious code in protobufjs-websocket-example (npm)
- Jul 4, 2025
Malicious code in with-shadcn (npm)
- Jul 4, 2025
Malicious code in confluence-drag-and-drop (npm)
- Jul 4, 2025
Malicious code in confluence-inline-tasks (npm)
- Jul 4, 2025
Malicious code in confluence-ui-components (npm)
- Jul 4, 2025
Malicious code in lz-evm-sdk-v1 (npm)
1 compromised version
- Jul 4, 2025
Malicious code in on-off-ramp-demo (npm)
1 compromised version
- Jul 4, 2025
Malicious code in onramp-demo-mobile (npm)
1 compromised version
- Jul 4, 2025
Malicious code in ai-app-foundation (npm)
1 compromised version
- Jul 4, 2025
Malicious code in old-header-parser (npm)
1 compromised version
- Jul 4, 2025
Malicious code in mre-layout-react (npm)
6 compromised versions
- Jul 4, 2025
Malicious code in mre-config-react (npm)
9 compromised versions
- Jul 4, 2025
Malicious code in with-next-intl (npm)
3 compromised versions
- Jul 4, 2025
Malicious code in auth0-app (npm)
1 compromised version
- Jul 4, 2025
Malicious code in ca-ui-carbon-toolkit (npm)
1 compromised version
- Jul 4, 2025
Malicious code in baglass (npm)
1 compromised version
- Jul 4, 2025
Malicious code in caglass (npm)
1 compromised version
- Jul 4, 2025
Malicious code in buzzwordcrm (npm)
1 compromised version
- Jul 4, 2025
Malicious code in @etech-flex-sre/ls-loading-spinner (npm)
1 compromised version
- Jul 4, 2025
Malware in @etech-flex-sre/ls-loading-spinner
1 compromised version
Page 5825 of 6,634