Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,743 total in npm · sorted newest first- Jun 18, 2025
Malicious code in dijit._widget (npm)
- Jun 18, 2025
Malware in jimu-theme
1 compromised version
- Jun 18, 2025
Malware in dijit._widget
1 compromised version
- Jun 18, 2025
Malware in dojo.data.itemfilereadstore
1 compromised version
- Jun 18, 2025
Malware in dojox.layout.expandopane
1 compromised version
- Jun 18, 2025
Malware in jimu-layouts
1 compromised version
- Jun 18, 2025
Malware in dijit.layout.bordercontainer
1 compromised version
- Jun 18, 2025
Malware in topomat.controls.ctrlmaster
1 compromised version
- Jun 18, 2025
Malware in jimu-core
1 compromised version
- Jun 18, 2025
Malware in dijit.form.filteringselect
1 compromised version
- Jun 18, 2025
Malicious code in jimu-arcgis (npm)
- Jun 18, 2025
Malware in jimu-arcgis
1 compromised version
- Jun 18, 2025
Malware in dojo.aspect
1 compromised version
- Jun 18, 2025
Malicious code in mr456 (npm)
- Jun 18, 2025
Malicious code in monpayload (npm)
- Jun 18, 2025
Malware in raise-http-server
1 compromised version
- Jun 18, 2025
Malicious code in adsk_react_axios (npm)
- Jun 18, 2025
Malware in ripe-grs
1 compromised version
- Jun 18, 2025
Malware in adsk_react_axios
1 compromised version
- Jun 18, 2025
Malware in getsourcefile
1 compromised version
- Jun 18, 2025
Malware in comp-base-login
1 compromised version
- Jun 18, 2025
Malware in symboltotypenode
1 compromised version
- Jun 18, 2025
Malicious code in comp-base-photoupload (npm)
- Jun 18, 2025
Malware in mw-remote
1 compromised version
- Jun 18, 2025
Malware in customdropdownadapter
1 compromised version
- Jun 18, 2025
Malware in comp-base-photoupload
1 compromised version
- Jun 18, 2025
Malware in routerprovider
1 compromised version
- Jun 18, 2025
Malware in utils-peak
1 compromised version
- Jun 18, 2025
Malicious code in @exitman_ctf/steal (npm)
- Jun 18, 2025
Malicious code in fooobar (npm)
- Jun 18, 2025
Malicious code in epic-ue-saleforce-form (npm)
- Jun 18, 2025
Malicious code in ecs-api-reference (npm)
- Jun 18, 2025
Malicious code in alexwilliam (npm)
- Jun 18, 2025
Malicious code in calc_6bt8utnoh0 (npm)
- Jun 18, 2025
Malicious code in @wh-components/core (npm)
- Jun 18, 2025
Malicious code in calc_03kqnrbygi (npm)
- Jun 18, 2025
Malicious code in alexmssd (npm)
- Jun 18, 2025
Malicious code in @unkn0wnartist/h1-poc-test (npm)
2 compromised versions
- Jun 18, 2025
Malicious code in @wh-components/icons (npm)
- Jun 18, 2025
Malicious code in @b10902118/note-xss-payload (npm)
- Jun 18, 2025
Malware in izat
1 compromised version
- Jun 18, 2025
Malware in lichess-db
1 compromised version
- Jun 18, 2025
Malicious code in flowmark (npm)
- Jun 18, 2025
Malware in flowmark
1 compromised version
- Jun 18, 2025
Malware in mafid-dev-fe
1 compromised version
- Jun 18, 2025
Malware in @openapi-platform/git-util
1 compromised version
- Jun 18, 2025
Malware in newcheckout
1 compromised version
- Jun 18, 2025
Malware in readium-shared-js
1 compromised version
- Jun 18, 2025
Malware in ls-onboarding-frontend
1 compromised version
- Jun 18, 2025
Malware in zora-metrics
1 compromised version
Page 5842 of 6,635