Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 4, 2025
Malware in strict-csp-builder
1 compromised version
- Jul 4, 2025
Malware in jridgewell-resolve-uri-latest
1 compromised version
- Jul 4, 2025
Malicious code in nodemantle002 (npm)
- Jul 4, 2025
Malicious code in libramat283 (npm)
- Jul 4, 2025
Malware in libramat283
1 compromised version
- Jul 4, 2025
Malware in nodemantle002
1 compromised version
- Jul 3, 2025
Malicious code in n8n-nodes-zalo-vts (npm)
- Jul 3, 2025
Malicious code in n8n-nodes-zalo-tools-vts (npm)
- Jul 3, 2025
Malicious code in n8n-nodes-zalo-tools-vietinsoft-v2 (npm)
- Jul 3, 2025
Malicious code in n8n-nodes-zalo-test (npm)
- Jul 3, 2025
Malicious code in n8n-nodes-simple-alert (npm)
- Jul 3, 2025
Malicious code in n8n-nodes-mtaitest-abc (npm)
- Jul 3, 2025
Malware in n8n-nodes-simple-alert
1 compromised version
- Jul 3, 2025
Malware in n8n-nodes-zalo-tools-vts
1 compromised version
- Jul 3, 2025
Malware in n8n-nodes-zalo-test
1 compromised version
- Jul 3, 2025
Malware in n8n-nodes-zalo-tools-vietinsoft-v2
1 compromised version
- Jul 3, 2025
Malware in n8n-nodes-mtaitest-abc
1 compromised version
- Jul 3, 2025
Malware in n8n-nodes-zalo-vts
1 compromised version
- Jul 3, 2025
Malicious code in seller-assistant-commons-fe (npm)
- Jul 3, 2025
Malicious code in reauthentication-node-sdk (npm)
- Jul 3, 2025
Malicious code in pricing-simulator-lib (npm)
- Jul 3, 2025
Malicious code in baileys-cleaner (npm)
- Jul 3, 2025
Malicious code in oft-evm (npm)
1 compromised version
- Jul 3, 2025
Malicious code in definitelytyped-tools (npm)
2 compromised versions
- Jul 3, 2025
Malicious code in 182-23run (npm)
- Jul 3, 2025
Malicious code in lz-evm-protocol-v2 (npm)
1 compromised version
- Jul 3, 2025
Malicious code in systemjs-builder-test (npm)
- Jul 3, 2025
Malicious code in lunasec-sdks (npm)
- Jul 3, 2025
Malicious code in react-fixtures-ssr (npm)
- Jul 3, 2025
Malicious code in frontend-redux (npm)
- Jul 3, 2025
Malicious code in title-dependencies (npm)
- Jul 3, 2025
Malicious code in dns-exfil-poc (npm)
- Jul 3, 2025
Malicious code in rjs-test (npm)
1 compromised version
- Jul 3, 2025
Malicious code in @emersonecologics/emerson-angular-trove (npm)
2 compromised versions
- Jul 3, 2025
Malicious code in stencil-module-base (npm)
2 compromised versions
- Jul 3, 2025
Malicious code in comcastapp (npm)
1 compromised version
- Jul 3, 2025
Malware in math-utils-gava
1 compromised version
- Jul 3, 2025
Malware in ati-requisites-form
1 compromised version
- Jul 3, 2025
Malware in ember-htmlbars
1 compromised version
- Jul 3, 2025
Malware in icinga
1 compromised version
- Jul 3, 2025
Malware in utils-component
1 compromised version
- Jul 3, 2025
Malware in comp-base-btn-switch
1 compromised version
- Jul 3, 2025
Malware in web-experience-app
1 compromised version
- Jul 3, 2025
Malware in blade_background
1 compromised version
- Jul 3, 2025
Malware in wiki-edit
1 compromised version
- Jul 3, 2025
Malicious code in regex-puppeteer (npm)
1 compromised version
- Jul 3, 2025
Malicious code in pupeteer-cluster-helper (npm)
3 compromised versions
- Jul 3, 2025
Malware in regex-puppeteer
1 compromised version
- Jul 3, 2025
Malware in pupeteer-cluster-helper
1 compromised version
- Jul 3, 2025
Malware in o11y-ds-frontend
1 compromised version
Page 5826 of 6,634