Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,761 total in npm · sorted newest first- Jun 18, 2025
Malicious code in alexwilliam (npm)
- Jun 18, 2025
Malicious code in calc_6bt8utnoh0 (npm)
- Jun 18, 2025
Malicious code in @wh-components/core (npm)
- Jun 18, 2025
Malicious code in calc_03kqnrbygi (npm)
- Jun 18, 2025
Malicious code in alexmssd (npm)
- Jun 18, 2025
Malicious code in @unkn0wnartist/h1-poc-test (npm)
2 compromised versions
- Jun 18, 2025
Malicious code in @wh-components/icons (npm)
- Jun 18, 2025
Malicious code in @b10902118/note-xss-payload (npm)
- Jun 18, 2025
Malware in izat
1 compromised version
- Jun 18, 2025
Malware in lichess-db
1 compromised version
- Jun 18, 2025
Malicious code in flowmark (npm)
- Jun 18, 2025
Malware in flowmark
1 compromised version
- Jun 18, 2025
Malware in mafid-dev-fe
1 compromised version
- Jun 18, 2025
Malware in @openapi-platform/git-util
1 compromised version
- Jun 18, 2025
Malware in newcheckout
1 compromised version
- Jun 18, 2025
Malware in readium-shared-js
1 compromised version
- Jun 18, 2025
Malware in ls-onboarding-frontend
1 compromised version
- Jun 18, 2025
Malware in zora-metrics
1 compromised version
- Jun 18, 2025
Malware in zora-logger
1 compromised version
- Jun 18, 2025
Malware in zoralabs-mintflow-helper
1 compromised version
- Jun 18, 2025
Malware in zora1abs-protoc-helper
1 compromised version
- Jun 18, 2025
Malware in zora-config-loader
1 compromised version
- Jun 18, 2025
Malware in z0ra-helper
1 compromised version
- Jun 18, 2025
Malware in zora1abs-mintflow-helper
1 compromised version
- Jun 18, 2025
Malware in zora1abs-co1ns-sdk
1 compromised version
- Jun 18, 2025
Malware in zora-exploit-payload
1 compromised version
- Jun 18, 2025
Malware in zora1abs-protoc01-sdk
1 compromised version
- Jun 18, 2025
Malicious code in wtp-next (npm)
1 compromised version
- Jun 18, 2025
Malicious code in world-id-js (npm)
3 compromised versions
- Jun 18, 2025
Malicious code in widgets-networkupdatetool (npm)
1 compromised version
- Jun 18, 2025
Malicious code in tailwindcss-animate-expand (npm)
1 compromised version
- Jun 18, 2025
Malicious code in spotless-prettier (npm)
1 compromised version
- Jun 18, 2025
Malicious code in react-web3-cache (npm)
5 compromised versions
- Jun 18, 2025
Malicious code in mongoose-lite (npm)
2 compromised versions
- Jun 18, 2025
Malicious code in mangeto (npm)
1 compromised version
- Jun 18, 2025
Malicious code in kucoin-universal-sdk-example (npm)
1 compromised version
- Jun 18, 2025
Malicious code in internal_acc_pkg (npm)
1 compromised version
- Jun 18, 2025
Malicious code in i2g-rosetta (npm)
1 compromised version
- Jun 18, 2025
Malicious code in framework_boclient (npm)
1 compromised version
- Jun 18, 2025
Malicious code in eslint-plugin-facebook (npm)
1 compromised version
- Jun 18, 2025
Malicious code in esb-core-helpers (npm)
5 compromised versions
- Jun 18, 2025
Malicious code in discord-easy-commands-v2 (npm)
1 compromised version
- Jun 18, 2025
Malicious code in content20200508 (npm)
1 compromised version
- Jun 18, 2025
Malicious code in clientcore-infrastructure-analytics (npm)
1 compromised version
- Jun 18, 2025
Malicious code in build-react-wrapper (npm)
3 compromised versions
- Jun 18, 2025
Malicious code in bhosdataparser (npm)
3 compromised versions
- Jun 18, 2025
Malicious code in @me404org/test (npm)
1 compromised version
- Jun 18, 2025
Malicious code in react-svg-plugin (npm)
- Jun 18, 2025
Malware in react-svg-plugin
1 compromised version
- Jun 18, 2025
Malware in dialog-holder
1 compromised version
Page 5843 of 6,636