Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jun 9, 2025
Malicious code in third-party-dep-b (npm)
- Jun 9, 2025
Malicious code in third-party-dep-a (npm)
- Jun 9, 2025
Malicious code in next-pwa-template (npm)
1 compromised version
- Jun 9, 2025
Malicious code in keepachangelog-manager (npm)
- Jun 9, 2025
Malicious code in 0x000asdqwe (npm)
1 compromised version
- Jun 9, 2025
Malicious code in zoro-gep-sdk (npm)
4 compromised versions
- Jun 8, 2025
Malicious code in base_sdk_const (npm)
1 compromised version
- Jun 8, 2025
Malicious code in payu-ui-v2 (npm)
1 compromised version
- Jun 7, 2025
Malicious code in bank-utils (npm)
1 compromised version
- Jun 7, 2025
Malicious code in fin-core (npm)
1 compromised version
- Jun 7, 2025
Malicious code in fin-logger (npm)
1 compromised version
- Jun 7, 2025
Malicious code in sess-store (npm)
1 compromised version
- Jun 7, 2025
Malicious code in sess-mgmt (npm)
1 compromised version
- Jun 7, 2025
Malicious code in pay-internal (npm)
1 compromised version
- Jun 7, 2025
Malicious code in pay-gateway (npm)
1 compromised version
- Jun 7, 2025
Malicious code in bank-auth (npm)
1 compromised version
- Jun 7, 2025
Malicious code in pay-reconciler (npm)
1 compromised version
- Jun 7, 2025
Malicious code in fin-connector (npm)
1 compromised version
- Jun 7, 2025
Malicious code in db-prd (npm)
1 compromised version
- Jun 7, 2025
Malicious code in ml-payment (npm)
1 compromised version
- Jun 7, 2025
Malicious code in db-prod-interno (npm)
1 compromised version
- Jun 7, 2025
Malicious code in gs-payments (npm)
1 compromised version
- Jun 7, 2025
Malicious code in nginx-internal (npm)
1 compromised version
- Jun 7, 2025
Malicious code in gs-payments-core (npm)
1 compromised version
- Jun 7, 2025
Malicious code in samba-core (npm)
1 compromised version
- Jun 7, 2025
Malicious code in mssql-internal (npm)
1 compromised version
- Jun 7, 2025
Malicious code in bsamba (npm)
1 compromised version
- Jun 7, 2025
Malicious code in apple-api-fake (npm)
1 compromised version
- Jun 7, 2025
Malicious code in prod-interno (npm)
2 compromised versions
- Jun 7, 2025
Malicious code in producao (npm)
2 compromised versions
- Jun 7, 2025
Malicious code in staging-tools (npm)
2 compromised versions
- Jun 7, 2025
Malicious code in infra-metrics (npm)
2 compromised versions
- Jun 7, 2025
Malicious code in internal-auth (npm)
2 compromised versions
- Jun 7, 2025
Malicious code in prod-shared (npm)
2 compromised versions
- Jun 7, 2025
Malicious code in dev-api-client (npm)
2 compromised versions
- Jun 7, 2025
Malicious code in corp-config (npm)
2 compromised versions
- Jun 7, 2025
Malicious code in prd-utils (npm)
2 compromised versions
- Jun 6, 2025
Malicious code in @portal-reporting/report-ui-templates (npm)
1 compromised version
- Jun 6, 2025
Malicious code in @velorum/browser-authenticator (npm)
1 compromised version
- Jun 6, 2025
Malicious code in @yahoo-engadget/i13n (npm)
1 compromised version
- Jun 6, 2025
Malicious code in kubernetes.io (npm)
3 compromised versions
- Jun 6, 2025
Malicious code in c2pa-js (npm)
1 compromised version
- Jun 6, 2025
Malicious code in fallback-screen (npm)
1 compromised version
- Jun 6, 2025
Malicious code in tcp-app-activation-react (npm)
- Jun 6, 2025
Malicious code in ach-spa-facephi (npm)
- Jun 6, 2025
Malicious code in ac-mvc-data-provider (npm)
1 compromised version
- Jun 6, 2025
Malicious code in ac-object (npm)
1 compromised version
- Jun 6, 2025
Malware in arc-offsec-custom-library
1 compromised version
- Jun 6, 2025
Malicious code in arc-offsec-custom-library6 (npm)
4 compromised versions
- Jun 6, 2025
Malicious code in www-cfg (npm)
2 compromised versions
Page 5854 of 6,634