Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jun 29, 2025
Malicious code in workflows-templates (npm)
11 compromised versions
- Jun 29, 2025
Malicious code in oneplussam (npm)
1 compromised version
- Jun 29, 2025
Malicious code in dynatrace-test-automation (npm)
4 compromised versions
- Jun 29, 2025
Malicious code in smart-attachments (npm)
1 compromised version
- Jun 29, 2025
Malicious code in assets-atlas-editor (npm)
1 compromised version
- Jun 29, 2025
Malicious code in jsmdc (npm)
1 compromised version
- Jun 29, 2025
Malicious code in plugin-api-version (npm)
1 compromised version
- Jun 29, 2025
Malicious code in @checkbox-technology-pty-ltd/custom-block-kit (npm)
1 compromised version
- Jun 29, 2025
Malicious code in titan-exchange-shared (npm)
1 compromised version
- Jun 29, 2025
Malicious code in puppetexplorer (npm)
2 compromised versions
- Jun 29, 2025
Malicious code in application-data (npm)
3 compromised versions
- Jun 28, 2025
Malicious code in ardiffact (npm)
1 compromised version
- Jun 28, 2025
Malicious code in govuk_frontend_alpha (npm)
- Jun 28, 2025
Malicious code in astrobot (npm)
3 compromised versions
- Jun 28, 2025
Malicious code in epic-mw (npm)
- Jun 28, 2025
Malicious code in umd-package (npm)
- Jun 28, 2025
Malicious code in globals-package (npm)
- Jun 28, 2025
Malicious code in es6-module-package (npm)
- Jun 28, 2025
Malicious code in test4-ross4 (npm)
2 compromised versions
- Jun 28, 2025
Malicious code in lard-o-matic (npm)
1 compromised version
- Jun 28, 2025
Malicious code in maybe-i-would-like-a-banana (npm)
2 compromised versions
- Jun 28, 2025
Malicious code in side-effects-package (npm)
1 compromised version
- Jun 28, 2025
Malicious code in flag-package (npm)
1 compromised version
- Jun 28, 2025
Malicious code in dynamic-target (npm)
- Jun 28, 2025
Malicious code in dynamic-stealer (npm)
1 compromised version
- Jun 28, 2025
Malicious code in dynamic-importer2 (npm)
- Jun 28, 2025
Malicious code in beanstalk-api (npm)
1 compromised version
- Jun 28, 2025
Malicious code in handlebars-formatter (npm)
6 compromised versions
- Jun 28, 2025
Malicious code in blurmph (npm)
- Jun 28, 2025
Malicious code in es6modules-nodejs (npm)
- Jun 28, 2025
Malicious code in nodergb-server (npm)
- Jun 28, 2025
Malicious code in commonjs-quirks (npm)
1 compromised version
- Jun 28, 2025
Malicious code in commonjs-package (npm)
1 compromised version
- Jun 28, 2025
Malicious code in cms-media-bridge (npm)
2 compromised versions
- Jun 28, 2025
Malicious code in pkg-dev-deps-only (npm)
1 compromised version
- Jun 28, 2025
Malicious code in prototype-poisoning-package (npm)
1 compromised version
- Jun 28, 2025
Malicious code in natel-plotly-panel (npm)
4 compromised versions
- Jun 28, 2025
Malicious code in online-learning-translations (npm)
- Jun 28, 2025
Malicious code in online-learning-components (npm)
- Jun 28, 2025
Malicious code in online-learning-ui (npm)
- Jun 27, 2025
Malicious code in i-just-f-hate-bananas-plz-dont-mind (npm)
- Jun 27, 2025
Malicious code in i-just-love-bananas-dont-mind (npm)
1 compromised version
- Jun 27, 2025
Malicious code in walletsendmoney-paypal (npm)
2 compromised versions
- Jun 27, 2025
Malicious code in bootstrap-modules (npm)
- Jun 27, 2025
Malicious code in my-little-package-library (npm)
- Jun 27, 2025
Malicious code in core_filters (npm)
- Jun 27, 2025
Malicious code in cf-install (npm)
- Jun 27, 2025
Malicious code in styled-components-react18-v5 (npm)
- Jun 27, 2025
Malware in synerix
1 compromised version
- Jun 27, 2025
Malware in remitly-icon-font
1 compromised version
Page 5833 of 6,634