Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,879 total in npm · sorted newest first- Jun 18, 2025
Malicious code in react-web3-cache (npm)
5 compromised versions
- Jun 18, 2025
Malicious code in mongoose-lite (npm)
2 compromised versions
- Jun 18, 2025
Malicious code in mangeto (npm)
1 compromised version
- Jun 18, 2025
Malicious code in kucoin-universal-sdk-example (npm)
1 compromised version
- Jun 18, 2025
Malicious code in internal_acc_pkg (npm)
1 compromised version
- Jun 18, 2025
Malicious code in i2g-rosetta (npm)
1 compromised version
- Jun 18, 2025
Malicious code in framework_boclient (npm)
1 compromised version
- Jun 18, 2025
Malicious code in eslint-plugin-facebook (npm)
1 compromised version
- Jun 18, 2025
Malicious code in esb-core-helpers (npm)
5 compromised versions
- Jun 18, 2025
Malicious code in discord-easy-commands-v2 (npm)
1 compromised version
- Jun 18, 2025
Malicious code in content20200508 (npm)
1 compromised version
- Jun 18, 2025
Malicious code in clientcore-infrastructure-analytics (npm)
1 compromised version
- Jun 18, 2025
Malicious code in build-react-wrapper (npm)
3 compromised versions
- Jun 18, 2025
Malicious code in bhosdataparser (npm)
3 compromised versions
- Jun 18, 2025
Malicious code in @me404org/test (npm)
1 compromised version
- Jun 18, 2025
Malicious code in react-svg-plugin (npm)
- Jun 18, 2025
Malware in react-svg-plugin
1 compromised version
- Jun 18, 2025
Malware in dialog-holder
1 compromised version
- Jun 18, 2025
Malware in solana-web3-adapter
1 compromised version
- Jun 18, 2025
Malware in lazy-logrocket
1 compromised version
- Jun 18, 2025
Malware in error-ux-components
1 compromised version
- Jun 18, 2025
Malware in next-pwa-template
1 compromised version
- Jun 18, 2025
Malware in frontegg-nuxt-example
1 compromised version
- Jun 18, 2025
Malware in flagd-playground
1 compromised version
- Jun 18, 2025
Malware in vite-plugin-esm-federation
1 compromised version
- Jun 18, 2025
Malware in keepachangelog-manager
1 compromised version
- Jun 18, 2025
Malware in truth-loop-server
1 compromised version
- Jun 18, 2025
Malware in hello-gator
1 compromised version
- Jun 18, 2025
Malicious code in pysvelte (npm)
1 compromised version
- Jun 18, 2025
Malware in pysvelte
1 compromised version
- Jun 18, 2025
Malware in pizza-delivery
1 compromised version
- Jun 18, 2025
Malware in claude-pr-action
1 compromised version
- Jun 18, 2025
Malicious code in internal-api (npm)
- Jun 18, 2025
Malicious code in app-prd (npm)
- Jun 18, 2025
Malware in app-prd
1 compromised version
- Jun 18, 2025
Malware in internal-api
1 compromised version
- Jun 18, 2025
Malware in pay-reconciler
1 compromised version
- Jun 18, 2025
Malware in fin-core
1 compromised version
- Jun 18, 2025
Malware in bank-auth
1 compromised version
- Jun 18, 2025
Malware in sess-mgmt
1 compromised version
- Jun 18, 2025
Malware in fin-logger
1 compromised version
- Jun 18, 2025
Malware in pay-internal
1 compromised version
- Jun 18, 2025
Malware in fin-connector
1 compromised version
- Jun 18, 2025
Malware in pay-gateway
1 compromised version
- Jun 18, 2025
Malware in bank-utils
1 compromised version
- Jun 18, 2025
Malware in sess-store
1 compromised version
- Jun 18, 2025
Malicious code in solana-web3-adapter (npm)
1 compromised version
- Jun 18, 2025
Malicious code in xhjxhjnpmrce (npm)
- Jun 18, 2025
Malicious code in vuepress-plugin-gitlabment (npm)
- Jun 18, 2025
Malicious code in vuepress-plugin-lego-analytics (npm)
Page 5846 of 6,638