Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jul 2, 2025
Malware in checkout-off-form-validation
1 compromised version
- Jul 2, 2025
Malware in frontend-device_detection
1 compromised version
- Jul 2, 2025
Malware in display-node_stream
1 compromised version
- Jul 2, 2025
Malware in fneves-my-test-poc2
1 compromised version
- Jul 2, 2025
Malware in identification-card-component
1 compromised version
- Jul 2, 2025
Malware in rgl-transitions-library
1 compromised version
- Jul 2, 2025
Malware in realtime-client-lib
1 compromised version
- Jul 2, 2025
Malware in display-node_utils
1 compromised version
- Jul 2, 2025
Malware in notifications-item
1 compromised version
- Jul 2, 2025
Malware in fneves-my-test-poc
1 compromised version
- Jul 2, 2025
Malware in melichat-sdk
1 compromised version
- Jul 2, 2025
Malware in datanerd
1 compromised version
- Jul 2, 2025
Malicious code in node-mongoose-orm (npm)
- Jul 1, 2025
Malicious code in ember-routing-htmlbars (npm)
1 compromised version
- Jul 1, 2025
Malicious code in github-datasource (npm)
2 compromised versions
- Jul 1, 2025
Malicious code in babel-plugin-nordic-module-resolver (npm)
1 compromised version
- Jul 1, 2025
Malicious code in videoel (npm)
1 compromised version
- Jul 1, 2025
Malicious code in sdk.babelhelpz (npm)
1 compromised version
- Jul 1, 2025
Malicious code in sdk.babeltest (npm)
1 compromised version
- Jul 1, 2025
Malicious code in ebay.cookies (npm)
- Jul 1, 2025
Malicious code in @paysafe-consumer/authentication (npm)
- Jul 1, 2025
Malicious code in price_wrapper (npm)
- Jul 1, 2025
Malicious code in list_column_item (npm)
- Jul 1, 2025
Malicious code in category_textured_background (npm)
- Jul 1, 2025
Malicious code in gad-logger (npm)
- Jul 1, 2025
Malware in gad-logger
1 compromised version
- Jul 1, 2025
Malicious code in stylelint-recommended-conf (npm)
3 compromised versions
- Jul 1, 2025
Malware in stylelint-recommended-conf
1 compromised version
- Jul 1, 2025
Malicious code in tag-rotator (npm)
2 compromised versions
- Jul 1, 2025
Malicious code in guild-rotator (npm)
- Jul 1, 2025
Malware in guild-rotator
1 compromised version
- Jul 1, 2025
Malware in tag-rotator
1 compromised version
- Jul 1, 2025
Malicious code in tools-component-library (npm)
- Jul 1, 2025
Malware in tools-component-library
1 compromised version
- Jul 1, 2025
Malware in kenzup-react-native-rsa-native
1 compromised version
- Jul 1, 2025
Malicious code in microviewsharedwidgets (npm)
1 compromised version
- Jul 1, 2025
Malware in com.unity.dt.app-ui
1 compromised version
- Jul 1, 2025
Malicious code in @jpl-encoder/node-encrypt (npm)
- Jul 1, 2025
Malware in @jpl-encoder/node-encrypt
1 compromised version
- Jul 1, 2025
Malicious code in cooo (npm)
6 compromised versions
- Jul 1, 2025
Malicious code in emerson-angular-trove (npm)
1 compromised version
- Jul 1, 2025
Malicious code in themeone-animate (npm)
5 compromised versions
- Jul 1, 2025
Malicious code in r6-info.js (npm)
- Jul 1, 2025
Malicious code in dtable-js (npm)
- Jul 1, 2025
Malware in dtable-js
1 compromised version
- Jul 1, 2025
Malware in r6-info.js
1 compromised version
- Jul 1, 2025
Malicious code in sdp-transform-grammar (npm)
58 compromised versions
- Jul 1, 2025
Malicious code in react-forget-runtime (npm)
34 compromised versions
- Jul 1, 2025
Malicious code in hero-tracing-placeholder (npm)
54 compromised versions
- Jul 1, 2025
Malicious code in gkx (npm)
12 compromised versions
Page 5830 of 6,634