Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jun 23, 2025
Malware in pretty-formatter
1 compromised version
- Jun 23, 2025
Malware in plugin-proposal-private-methods
1 compromised version
- Jun 23, 2025
Malware in plugin-react
1 compromised version
- Jun 23, 2025
Malicious code in strict-csp-builder (npm)
2 compromised versions
- Jun 22, 2025
Malicious code in red-bull-venue-tools (npm)
1 compromised version
- Jun 22, 2025
Malicious code in nitro-contracts (npm)
- Jun 22, 2025
Malicious code in mydummyproject-zyp (npm)
1 compromised version
- Jun 22, 2025
Malicious code in lucca-sdk (npm)
7 compromised versions
- Jun 22, 2025
Malicious code in handelsblatt-hypesignals-ui-components (npm)
1 compromised version
- Jun 21, 2025
Malicious code in docs-root (npm)
- Jun 21, 2025
Malicious code in hcbridge (npm)
1 compromised version
- Jun 21, 2025
Malicious code in audible-react-assets (npm)
1 compromised version
- Jun 21, 2025
Malicious code in cro-pricing (npm)
5 compromised versions
- Jun 20, 2025
Malicious code in integromat-iml (npm)
1 compromised version
- Jun 20, 2025
Malicious code in postcss-theme-vars (npm)
- Jun 20, 2025
Malicious code in postcss-query-splitter (npm)
- Jun 20, 2025
Malicious code in postcss-layout-grid (npm)
1 compromised version
- Jun 20, 2025
Malicious code in postcss-color-fn (npm)
- Jun 20, 2025
Malicious code in next-sweetalert2 (npm)
- Jun 20, 2025
Malware in postcss-query-splitter
1 compromised version
- Jun 20, 2025
Malware in postcss-color-fn
1 compromised version
- Jun 20, 2025
Malware in postcss-layout-grid
1 compromised version
- Jun 20, 2025
Malware in postcss-theme-vars
1 compromised version
- Jun 20, 2025
Malware in next-sweetalert2
1 compromised version
- Jun 20, 2025
Malicious code in ati-requisites-form (npm)
- Jun 20, 2025
Malicious code in camelcase-v2 (npm)
- Jun 20, 2025
Malicious code in prior-config (npm)
- Jun 20, 2025
Malware in prior-config
1 compromised version
- Jun 20, 2025
Malicious code in vite-auditlog (npm)
- Jun 20, 2025
Malware in vite-auditlog
1 compromised version
- Jun 20, 2025
Malicious code in my_module_luckywater (npm)
- Jun 20, 2025
Malicious code in jsonwepjoken (npm)
1 compromised version
- Jun 20, 2025
Malware in jsonwepjoken
1 compromised version
- Jun 20, 2025
Malware in my_module_luckywater
1 compromised version
- Jun 20, 2025
Malicious code in @com.att.vstb/vstb (npm)
3 compromised versions
- Jun 20, 2025
Malicious code in @com.att.dtventertainment/dfw-pm-yo-space-plugin (npm)
- Jun 20, 2025
Malware in @com.att.dtventertainment/dfw-pm-yo-space-plugin
1 compromised version
- Jun 20, 2025
Malware in @com.att.vstb/vstb
1 compromised version
- Jun 20, 2025
Malicious code in vscode-webview-common (npm)
- Jun 20, 2025
Malicious code in thunderbolt-features-loaders (npm)
- Jun 20, 2025
Malicious code in somm-boilerplate (npm)
- Jun 20, 2025
Malicious code in rulai (npm)
- Jun 20, 2025
Malicious code in rma-shared (npm)
- Jun 20, 2025
Malicious code in prismicio-types (npm)
- Jun 20, 2025
Malicious code in pfm-app (npm)
- Jun 20, 2025
Malicious code in fwc-core (npm)
- Jun 20, 2025
Malicious code in envs-validator (npm)
- Jun 20, 2025
Malware in vscode-webview-common
1 compromised version
- Jun 20, 2025
Malware in envs-validator
1 compromised version
- Jun 20, 2025
Malware in eshops-components-library
1 compromised version
Page 5838 of 6,634