Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 2, 2025
Malicious code in patient-appointment-management (npm)
- Jul 2, 2025
Malicious code in draw-with-twilio (npm)
- Jul 2, 2025
Malware in plugin-notes
1 compromised version
- Jul 2, 2025
Malware in patient-appointment-management
1 compromised version
- Jul 2, 2025
Malware in telehealth
1 compromised version
- Jul 2, 2025
Malware in taskrouter-event-listener
1 compromised version
- Jul 2, 2025
Malware in draw-with-twilio
1 compromised version
- Jul 2, 2025
Malicious code in servula (npm)
- Jul 2, 2025
Malicious code in reqweaver (npm)
- Jul 2, 2025
Malicious code in reqnexus (npm)
- Jul 2, 2025
Malware in reqnexus
1 compromised version
- Jul 2, 2025
Malware in reqweaver
1 compromised version
- Jul 2, 2025
Malware in servula
1 compromised version
- Jul 2, 2025
Malware in oneplussam
1 compromised version
- Jul 2, 2025
Malware in umd-package
1 compromised version
- Jul 2, 2025
Malware in es6-module-package
1 compromised version
- Jul 2, 2025
Malware in lard-o-matic
1 compromised version
- Jul 2, 2025
Malware in flag-package
1 compromised version
- Jul 2, 2025
Malware in side-effects-package
1 compromised version
- Jul 2, 2025
Malware in globals-package
1 compromised version
- Jul 2, 2025
Malicious code in azure-sentinel (npm)
- Jul 2, 2025
Malware in commonjs-quirks
1 compromised version
- Jul 2, 2025
Malware in prototype-poisoning-package
1 compromised version
- Jul 2, 2025
Malware in commonjs-package
1 compromised version
- Jul 2, 2025
Malware in dynamic-importer2
1 compromised version
- Jul 2, 2025
Malware in dynamic-target
1 compromised version
- Jul 2, 2025
Malware in dynamic-stealer
1 compromised version
- Jul 2, 2025
Malware in azure-sentinel
1 compromised version
- Jul 2, 2025
Malware in blurmph
1 compromised version
- Jul 2, 2025
Malicious code in score-tools (npm)
- Jul 2, 2025
Malware in score-tools
1 compromised version
- Jul 2, 2025
Malicious code in supply-frontend-runtime (npm)
1 compromised version
- Jul 2, 2025
Malicious code in rgl-transitions-library (npm)
1 compromised version
- Jul 2, 2025
Malicious code in realtime-client-lib (npm)
- Jul 2, 2025
Malicious code in notifications-item (npm)
1 compromised version
- Jul 2, 2025
Malicious code in melichat-sdk (npm)
1 compromised version
- Jul 2, 2025
Malicious code in identification-card-component (npm)
1 compromised version
- Jul 2, 2025
Malicious code in frontend-env (npm)
1 compromised version
- Jul 2, 2025
Malicious code in frontend-device_detection (npm)
1 compromised version
- Jul 2, 2025
Malicious code in fneves-my-test-poc2 (npm)
1 compromised version
- Jul 2, 2025
Malicious code in fneves-my-test-poc (npm)
1 compromised version
- Jul 2, 2025
Malicious code in display-node_utils (npm)
1 compromised version
- Jul 2, 2025
Malicious code in display-node_stream (npm)
1 compromised version
- Jul 2, 2025
Malicious code in display-network (npm)
1 compromised version
- Jul 2, 2025
Malicious code in display-fetch_stream (npm)
1 compromised version
- Jul 2, 2025
Malicious code in checkout-off-form-validation (npm)
1 compromised version
- Jul 2, 2025
Malware in display-fetch_stream
1 compromised version
- Jul 2, 2025
Malware in supply-frontend-runtime
1 compromised version
- Jul 2, 2025
Malware in display-network
1 compromised version
- Jul 2, 2025
Malware in frontend-env
1 compromised version
Page 5829 of 6,634