Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jun 10, 2025
Malicious code in react-native-atob (npm)
1 compromised version
- Jun 10, 2025
Malware in react-native-atob
1 compromised version
- Jun 10, 2025
Malicious code in pyserial (npm)
1 compromised version
- Jun 10, 2025
Malware in pyserial
1 compromised version
- Jun 10, 2025
Malicious code in pyiceberg (npm)
1 compromised version
- Jun 10, 2025
Malware in pyiceberg
1 compromised version
- Jun 10, 2025
Malicious code in pydantic (npm)
1 compromised version
- Jun 10, 2025
Malware in pydantic
1 compromised version
- Jun 10, 2025
Malicious code in playwright-coverage (npm)
1 compromised version
- Jun 10, 2025
Malware in playwright-coverage
1 compromised version
- Jun 10, 2025
Malicious code in pipreqs (npm)
1 compromised version
- Jun 10, 2025
Malware in pipreqs
1 compromised version
- Jun 10, 2025
Malicious code in opt-einsum (npm)
1 compromised version
- Jun 10, 2025
Malware in opt-einsum
1 compromised version
- Jun 10, 2025
Malicious code in openssl-pkcs11 (npm)
1 compromised version
- Jun 10, 2025
Malware in openssl-pkcs11
1 compromised version
- Jun 10, 2025
Malicious code in ohhttpstubs (npm)
1 compromised version
- Jun 10, 2025
Malware in ohhttpstubs
1 compromised version
- Jun 10, 2025
Malicious code in office-addin-debugger (npm)
1 compromised version
- Jun 10, 2025
Malware in office-addin-debugger
1 compromised version
- Jun 10, 2025
Malicious code in react-logs (npm)
- Jun 10, 2025
Malicious code in node-loggers (npm)
- Jun 10, 2025
Malware in node-loggers
1 compromised version
- Jun 10, 2025
Malware in react-logs
1 compromised version
- Jun 10, 2025
Malicious code in networkx (npm)
1 compromised version
- Jun 10, 2025
Malware in networkx
1 compromised version
- Jun 10, 2025
Malicious code in ncftp (npm)
1 compromised version
- Jun 10, 2025
Malware in ncftp
1 compromised version
- Jun 10, 2025
Malicious code in meteor-react-component (npm)
1 compromised version
- Jun 10, 2025
Malware in meteor-react-component
1 compromised version
- Jun 10, 2025
Malicious code in media-recorder-polyfill (npm)
1 compromised version
- Jun 10, 2025
Malware in media-recorder-polyfill
1 compromised version
- Jun 10, 2025
Malicious code in lubridate (npm)
1 compromised version
- Jun 10, 2025
Malware in lubridate
1 compromised version
- Jun 10, 2025
Malicious code in listenv (npm)
1 compromised version
- Jun 10, 2025
Malware in listenv
1 compromised version
- Jun 10, 2025
Malicious code in libxslt1-dev (npm)
1 compromised version
- Jun 10, 2025
Malware in libxslt1-dev
1 compromised version
- Jun 10, 2025
Malicious code in libxml2-dev (npm)
1 compromised version
- Jun 10, 2025
Malware in libxml2-dev
1 compromised version
- Jun 10, 2025
Malicious code in libssl-dev (npm)
1 compromised version
- Jun 10, 2025
Malware in libssl-dev
1 compromised version
- Jun 10, 2025
Malicious code in libp11 (npm)
1 compromised version
- Jun 10, 2025
Malware in libp11
1 compromised version
- Jun 10, 2025
Malicious code in libffi-dev (npm)
1 compromised version
- Jun 10, 2025
Malware in npm package libffi-dev
1 compromised version
- Jun 10, 2025
Malicious code in knn-kdtreejs (npm)
1 compromised version
- Jun 10, 2025
Malware in knn-kdtreejs
1 compromised version
- Jun 10, 2025
Malicious code in keypress-win (npm)
1 compromised version
- Jun 10, 2025
Malware in keypress-win
1 compromised version
Page 5852 of 6,634