Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jun 10, 2025
Malware in @loybung/unicode-fonts
1 compromised version
- Jun 10, 2025
Malware in @loybung/dous
1 compromised version
- Jun 10, 2025
Malware in @loybung/provider-loader
1 compromised version
- Jun 10, 2025
Malicious code in @loybung/weatherapi (npm)
- Jun 10, 2025
Malicious code in @loybung/utils (npm)
- Jun 10, 2025
Malicious code in @loybung/textreplace (npm)
- Jun 10, 2025
Malicious code in @loybung/textfont (npm)
- Jun 10, 2025
Malicious code in @loybung/systeminfo (npm)
- Jun 10, 2025
Malicious code in @loybung/rdcw-slipverify (npm)
- Jun 10, 2025
Malicious code in @loybung/launcher (npm)
- Jun 10, 2025
Malicious code in @loybung/encode (npm)
- Jun 10, 2025
Malicious code in @loybung/emoji (npm)
- Jun 10, 2025
Malicious code in @loybung/discohook (npm)
- Jun 10, 2025
Malware in @loybung/emoji
1 compromised version
- Jun 10, 2025
Malware in @loybung/rdcw-slipverify
1 compromised version
- Jun 10, 2025
Malware in @loybung/systeminfo
1 compromised version
- Jun 10, 2025
Malware in @loybung/textreplace
1 compromised version
- Jun 10, 2025
Malware in @loybung/launcher
1 compromised version
- Jun 10, 2025
Malware in @loybung/weatherapi
1 compromised version
- Jun 10, 2025
Malware in @loybung/textfont
1 compromised version
- Jun 10, 2025
Malware in @loybung/encode
1 compromised version
- Jun 10, 2025
Malware in @loybung/discohook
1 compromised version
- Jun 10, 2025
Malware in @loybung/utils
1 compromised version
- Jun 10, 2025
Malicious code in soracom-xmas-pi (npm)
1 compromised version
- Jun 10, 2025
Malicious code in pullapprove-alt (npm)
1 compromised version
- Jun 10, 2025
Malicious code in opensearch-with-grafana-lambdas (npm)
1 compromised version
- Jun 10, 2025
Malware in soracom-xmas-pi
1 compromised version
- Jun 10, 2025
Malware in pullapprove-alt
1 compromised version
- Jun 10, 2025
Malware in xsolla-pay2play-widget
1 compromised version
- Jun 10, 2025
Malware in opensearch-with-grafana-lambdas
1 compromised version
- Jun 10, 2025
Malicious code in smart-request-buffers (npm)
- Jun 10, 2025
Malware in smart-request-buffers
1 compromised version
- Jun 10, 2025
Malicious code in yt606060-utils (npm)
- Jun 10, 2025
Malware in yt606060-utils
1 compromised version
- Jun 10, 2025
Malicious code in vite-plugin-purify (npm)
- Jun 10, 2025
Malicious code in nextjs-insight (npm)
- Jun 10, 2025
Malware in nextjs-insight
1 compromised version
- Jun 10, 2025
Malware in vite-plugin-purify
1 compromised version
- Jun 10, 2025
Malicious code in vite-plugin-svgn (npm)
- Jun 10, 2025
Malware in vite-plugin-svgn
1 compromised version
- Jun 10, 2025
Malware in internal-lib-razor
1 compromised version
- Jun 10, 2025
Malicious code in quake-web (npm)
- Jun 10, 2025
Malicious code in bzl_components-lib (npm)
- Jun 10, 2025
Malicious code in @it-common/lbp_common (npm)
- Jun 10, 2025
Malware in bzl_components-lib
1 compromised version
- Jun 10, 2025
Malware in @it-common/lbp_common
1 compromised version
- Jun 10, 2025
Malware in quake-web
1 compromised version
- Jun 10, 2025
Malicious code in mockup-js-plugin (npm)
2 compromised versions
- Jun 10, 2025
Malware in mockup-js-plugin
1 compromised version
- Jun 10, 2025
Malicious code in react-intlist (npm)
2 compromised versions
Page 5850 of 6,634