Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jun 19, 2025
Malware in mattermost-hardware-keyboard
1 compromised version
- Jun 19, 2025
Malicious code in api-mojang (npm)
- Jun 19, 2025
Malware in api-mojang
1 compromised version
- Jun 19, 2025
Malicious code in internallib_v210 (npm)
- Jun 19, 2025
Malware in internallib_v210
1 compromised version
- Jun 19, 2025
Malware in tcp-app-activation-react
1 compromised version
- Jun 19, 2025
Malware in ach-spa-facephi
1 compromised version
- Jun 19, 2025
Malicious code in node-orm-logger (npm)
- Jun 19, 2025
Malware in node-orm-logger
1 compromised version
- Jun 18, 2025
Malicious code in frontend-tests-demo (npm)
- Jun 18, 2025
Malicious code in sentry-docs (npm)
1 compromised version
- Jun 18, 2025
Malicious code in obsi (npm)
- Jun 18, 2025
Malicious code in @cybs-plugins/theme (npm)
1 compromised version
- Jun 18, 2025
Malicious code in @saas2/utils (npm)
- Jun 18, 2025
Malicious code in taskcluster-db (npm)
4 compromised versions
- Jun 18, 2025
Malicious code in nifi-frontend (npm)
- Jun 18, 2025
Malicious code in web-app-activities (npm)
- Jun 18, 2025
Malicious code in wonderland-api-security-plugin (npm)
- Jun 18, 2025
Malicious code in web_for_ntu_flag2 (npm)
- Jun 18, 2025
Malicious code in wix-test-package (npm)
- Jun 18, 2025
Malicious code in totallynotapaylaod (npm)
- Jun 18, 2025
Malicious code in test_for_ntu_note_2 (npm)
- Jun 18, 2025
Malicious code in rival-fetch-hook (npm)
- Jun 18, 2025
Malicious code in compound-design-tokens (npm)
- Jun 18, 2025
Malicious code in ntu_test_1 (npm)
- Jun 18, 2025
Malicious code in eth-auditlog (npm)
- Jun 18, 2025
Malware in eth-auditlog
1 compromised version
- Jun 18, 2025
Malicious code in vite-logify (npm)
- Jun 18, 2025
Malicious code in vite-logging-tool (npm)
4 compromised versions
- Jun 18, 2025
Malicious code in postcss-preloader (npm)
- Jun 18, 2025
Malicious code in js-log-print (npm)
1 compromised version
- Jun 18, 2025
Malicious code in dev-filterjs (npm)
- Jun 18, 2025
Malware in js-log-print
1 compromised version
- Jun 18, 2025
Malware in postcss-preloader
1 compromised version
- Jun 18, 2025
Malware in vite-logging-tool
1 compromised version
- Jun 18, 2025
Malware in vite-logify
1 compromised version
- Jun 18, 2025
Malware in dev-filterjs
1 compromised version
- Jun 18, 2025
Malicious code in topomat.controls.ctrlmaster (npm)
- Jun 18, 2025
Malicious code in jimu-theme (npm)
- Jun 18, 2025
Malicious code in jimu-layouts (npm)
- Jun 18, 2025
Malicious code in jimu-core (npm)
- Jun 18, 2025
Malicious code in dojox.layout.expandopane (npm)
- Jun 18, 2025
Malicious code in dojo.data.itemfilereadstore (npm)
- Jun 18, 2025
Malicious code in dijit.layout.bordercontainer (npm)
- Jun 18, 2025
Malicious code in dijit.form.filteringselect (npm)
- Jun 18, 2025
Malicious code in dijit._widget (npm)
- Jun 18, 2025
Malware in jimu-theme
1 compromised version
- Jun 18, 2025
Malware in dijit._widget
1 compromised version
- Jun 18, 2025
Malware in dojo.data.itemfilereadstore
1 compromised version
- Jun 18, 2025
Malware in dojox.layout.expandopane
1 compromised version
Page 5840 of 6,634