Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,890 total in npm · sorted newest first- Jun 18, 2025
Malware in sess-mgmt
1 compromised version
- Jun 18, 2025
Malware in fin-logger
1 compromised version
- Jun 18, 2025
Malware in pay-internal
1 compromised version
- Jun 18, 2025
Malware in fin-connector
1 compromised version
- Jun 18, 2025
Malware in pay-gateway
1 compromised version
- Jun 18, 2025
Malware in bank-utils
1 compromised version
- Jun 18, 2025
Malware in sess-store
1 compromised version
- Jun 18, 2025
Malicious code in solana-web3-adapter (npm)
1 compromised version
- Jun 18, 2025
Malicious code in xhjxhjnpmrce (npm)
- Jun 18, 2025
Malicious code in vuepress-plugin-gitlabment (npm)
- Jun 18, 2025
Malicious code in vuepress-plugin-lego-analytics (npm)
- Jun 18, 2025
Malicious code in plonkscript-docs (npm)
1 compromised version
- Jun 18, 2025
Malicious code in sparemanager (npm)
- Jun 18, 2025
Malicious code in rif-wallet-services (npm)
- Jun 18, 2025
Malicious code in plugin-react (npm)
2 compromised versions
- Jun 18, 2025
Malicious code in microviewreact (npm)
1 compromised version
- Jun 18, 2025
Malicious code in next-typescript-mercadolibre (npm)
- Jun 18, 2025
Malicious code in houdini_test_pack_1 (npm)
- Jun 18, 2025
Malicious code in content-silent-alarms (npm)
- Jun 18, 2025
Malicious code in always-target (npm)
- Jun 17, 2025
Malicious code in voicebuilder_ui (npm)
1 compromised version
- Jun 17, 2025
Malicious code in vas_extension (npm)
3 compromised versions
- Jun 17, 2025
Malicious code in mafid-dev-fe (npm)
- Jun 17, 2025
Malicious code in obfuscated (npm)
- Jun 17, 2025
Malware in obfuscated
1 compromised version
- Jun 17, 2025
Malicious code in test.relativity.package (npm)
1 compromised version
- Jun 17, 2025
Malicious code in test.reativity.package (npm)
- Jun 17, 2025
Malicious code in example-malicious (npm)
- Jun 17, 2025
Malware in test.relativity.package
1 compromised version
- Jun 17, 2025
Malware in test.reativity.package
1 compromised version
- Jun 17, 2025
Malware in example-malicious
1 compromised version
- Jun 17, 2025
Malware in zoro-gep-sdk
1 compromised version
- Jun 17, 2025
Malicious code in metaplex (npm)
- Jun 17, 2025
Malware in metaplex
1 compromised version
- Jun 17, 2025
Malware in my-headline
1 compromised version
- Jun 17, 2025
Malicious code in remitly-icon-font (npm)
3 compromised versions
- Jun 17, 2025
Malware in staging-tools
1 compromised version
- Jun 17, 2025
Malware in gs-payments-core
1 compromised version
- Jun 17, 2025
Malware in db-prod-interno
1 compromised version
- Jun 17, 2025
Malware in nginx-internal
1 compromised version
- Jun 17, 2025
Malware in bsamba
1 compromised version
- Jun 17, 2025
Malware in ml-payment
1 compromised version
- Jun 17, 2025
Malware in db-prd
1 compromised version
- Jun 17, 2025
Malware in apple-api-fake
1 compromised version
- Jun 17, 2025
Malware in samba-core
1 compromised version
- Jun 17, 2025
Malware in producao
1 compromised version
- Jun 17, 2025
Malware in prod-interno
1 compromised version
- Jun 17, 2025
Malware in gs-payments
1 compromised version
- Jun 17, 2025
Malware in mssql-internal
1 compromised version
- Jun 17, 2025
Malware in internal-logger
1 compromised version
Page 5847 of 6,638