Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,878 total in npm · sorted newest first- Jun 18, 2025
Malware in raise-http-server
1 compromised version
- Jun 18, 2025
Malicious code in adsk_react_axios (npm)
- Jun 18, 2025
Malware in ripe-grs
1 compromised version
- Jun 18, 2025
Malware in adsk_react_axios
1 compromised version
- Jun 18, 2025
Malware in getsourcefile
1 compromised version
- Jun 18, 2025
Malware in comp-base-login
1 compromised version
- Jun 18, 2025
Malware in symboltotypenode
1 compromised version
- Jun 18, 2025
Malicious code in comp-base-photoupload (npm)
- Jun 18, 2025
Malware in mw-remote
1 compromised version
- Jun 18, 2025
Malware in customdropdownadapter
1 compromised version
- Jun 18, 2025
Malware in comp-base-photoupload
1 compromised version
- Jun 18, 2025
Malware in routerprovider
1 compromised version
- Jun 18, 2025
Malware in utils-peak
1 compromised version
- Jun 18, 2025
Malicious code in @exitman_ctf/steal (npm)
- Jun 18, 2025
Malicious code in fooobar (npm)
- Jun 18, 2025
Malicious code in epic-ue-saleforce-form (npm)
- Jun 18, 2025
Malicious code in ecs-api-reference (npm)
- Jun 18, 2025
Malicious code in alexwilliam (npm)
- Jun 18, 2025
Malicious code in calc_6bt8utnoh0 (npm)
- Jun 18, 2025
Malicious code in @wh-components/core (npm)
- Jun 18, 2025
Malicious code in calc_03kqnrbygi (npm)
- Jun 18, 2025
Malicious code in alexmssd (npm)
- Jun 18, 2025
Malicious code in @unkn0wnartist/h1-poc-test (npm)
2 compromised versions
- Jun 18, 2025
Malicious code in @wh-components/icons (npm)
- Jun 18, 2025
Malicious code in @b10902118/note-xss-payload (npm)
- Jun 18, 2025
Malware in izat
1 compromised version
- Jun 18, 2025
Malware in lichess-db
1 compromised version
- Jun 18, 2025
Malicious code in flowmark (npm)
- Jun 18, 2025
Malware in flowmark
1 compromised version
- Jun 18, 2025
Malware in mafid-dev-fe
1 compromised version
- Jun 18, 2025
Malware in @openapi-platform/git-util
1 compromised version
- Jun 18, 2025
Malware in newcheckout
1 compromised version
- Jun 18, 2025
Malware in readium-shared-js
1 compromised version
- Jun 18, 2025
Malware in ls-onboarding-frontend
1 compromised version
- Jun 18, 2025
Malware in zora-metrics
1 compromised version
- Jun 18, 2025
Malware in zora-logger
1 compromised version
- Jun 18, 2025
Malware in zoralabs-mintflow-helper
1 compromised version
- Jun 18, 2025
Malware in zora1abs-protoc-helper
1 compromised version
- Jun 18, 2025
Malware in zora-config-loader
1 compromised version
- Jun 18, 2025
Malware in z0ra-helper
1 compromised version
- Jun 18, 2025
Malware in zora1abs-mintflow-helper
1 compromised version
- Jun 18, 2025
Malware in zora1abs-co1ns-sdk
1 compromised version
- Jun 18, 2025
Malware in zora-exploit-payload
1 compromised version
- Jun 18, 2025
Malware in zora1abs-protoc01-sdk
1 compromised version
- Jun 18, 2025
Malicious code in wtp-next (npm)
1 compromised version
- Jun 18, 2025
Malicious code in world-id-js (npm)
3 compromised versions
- Jun 18, 2025
Malicious code in widgets-networkupdatetool (npm)
1 compromised version
- Jun 18, 2025
Malicious code in tailwindcss-animate-expand (npm)
1 compromised version
- Jun 18, 2025
Malicious code in spotless-prettier (npm)
1 compromised version
- Jun 18, 2025
Malicious code in react-web3-cache (npm)
5 compromised versions
Page 5845 of 6,638