Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 2, 2025
Malware in chunk-validation
1 compromised version
- Jul 2, 2025
Malware in @wh-components/icons
1 compromised version
- Jul 2, 2025
Malware in @wh-components/core
1 compromised version
- Jul 2, 2025
Malicious code in myrepotesting-main (npm)
- Jul 2, 2025
Malicious code in myrepotesting (npm)
- Jul 2, 2025
Malicious code in @pwly/powerley-utils (npm)
- Jul 2, 2025
Malware in @pwly/powerley-utils
1 compromised version
- Jul 2, 2025
Malware in myrepotesting-main
1 compromised version
- Jul 2, 2025
Malware in myrepotesting
1 compromised version
- Jul 2, 2025
Malicious code in json-cookie-jar (npm)
1 compromised version
- Jul 2, 2025
Malware in json-cookie-jar
1 compromised version
- Jul 2, 2025
Malicious code in env-info-checker-kyy3w4fiurevd8uy43wfre (npm)
- Jul 2, 2025
Malware in env-info-checker-kyy3w4fiurevd8uy43wfre
1 compromised version
- Jul 2, 2025
Malicious code in queshymouse (npm)
- Jul 2, 2025
Malicious code in queshyfrog (npm)
- Jul 2, 2025
Malicious code in bonnet-ltd (npm)
- Jul 2, 2025
Malware in bonnet-ltd
1 compromised version
- Jul 2, 2025
Malware in queshyfrog
1 compromised version
- Jul 2, 2025
Malware in queshymouse
1 compromised version
- Jul 2, 2025
Malware in @evg-ui/lib
1 compromised version
- Jul 2, 2025
Malicious code in grafana-github-datasource (npm)
1 compromised version
- Jul 2, 2025
Malicious code in rpc-selfbot (npm)
11 compromised versions
- Jul 2, 2025
Malicious code in discord-rpc-presence (npm)
- Jul 2, 2025
Malware in rpc-selfbot
1 compromised version
- Jul 2, 2025
Malware in discord-rpc-presence
1 compromised version
- Jul 2, 2025
Malware in proxyapi-docs
1 compromised version
- Jul 2, 2025
Malware in eslint-plugin-panel-ops
1 compromised version
- Jul 2, 2025
Malware in odin-backoffice-starter-kit
1 compromised version
- Jul 2, 2025
Malware in studiospanelopsweb
1 compromised version
- Jul 2, 2025
Malicious code in com.razer.chromasdk (npm)
1 compromised version
- Jul 2, 2025
Malware in maybe-i-would-like-a-banana
1 compromised version
- Jul 2, 2025
Malicious code in frontend-building_blocks (npm)
- Jul 2, 2025
Malware in frontend-building_blocks
1 compromised version
- Jul 2, 2025
Malware in meli-ai-chat-library
1 compromised version
- Jul 2, 2025
Malware in dx-chat-ai-client
1 compromised version
- Jul 2, 2025
Malware in nordic-dev-ts
1 compromised version
- Jul 2, 2025
Malware in i-just-f-hate-bananas-plz-dont-mind
1 compromised version
- Jul 2, 2025
Malware in babel-plugin-nordic-module-resolver
1 compromised version
- Jul 2, 2025
Malicious code in wp-stream (npm)
- Jul 2, 2025
Malicious code in twilio-webchat-widget (npm)
- Jul 2, 2025
Malicious code in karakeep (npm)
- Jul 2, 2025
Malicious code in ipmi-command (npm)
- Jul 2, 2025
Malware in es6modules-nodejs
1 compromised version
- Jul 2, 2025
Malware in karakeep
1 compromised version
- Jul 2, 2025
Malware in ipmi-command
1 compromised version
- Jul 2, 2025
Malware in wp-stream
1 compromised version
- Jul 2, 2025
Malware in twilio-webchat-widget
1 compromised version
- Jul 2, 2025
Malicious code in telehealth (npm)
- Jul 2, 2025
Malicious code in taskrouter-event-listener (npm)
- Jul 2, 2025
Malicious code in plugin-notes (npm)
Page 5828 of 6,634