Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jun 6, 2025
Malicious code in lazy-logrocket (npm)
4 compromised versions
- Jun 6, 2025
Malicious code in virtru-private (npm)
5 compromised versions
- Jun 6, 2025
Malicious code in launch-darkly-provider (npm)
5 compromised versions
- Jun 6, 2025
Malicious code in virtru-design-params (npm)
7 compromised versions
- Jun 5, 2025
Malicious code in stake-config (npm)
- Jun 5, 2025
Malware in stake-config
1 compromised version
- Jun 5, 2025
Malicious code in dc-spectrum-v3-core (npm)
4 compromised versions
- Jun 5, 2025
Malicious code in pages-admin (npm)
3 compromised versions
- Jun 5, 2025
Malicious code in moonpay-demo-integrations (npm)
3 compromised versions
- Jun 5, 2025
Malicious code in lpgoffers-api-contract (npm)
1 compromised version
- Jun 5, 2025
Malicious code in bu_account_js_sdk (npm)
1 compromised version
- Jun 5, 2025
Malicious code in sa-sdk-v5 (npm)
2 compromised versions
- Jun 5, 2025
Malicious code in fluent-log (npm)
- Jun 5, 2025
Malware in fluent-log
1 compromised version
- Jun 4, 2025
Malicious code in world-id-lens-dapp (npm)
3 compromised versions
- Jun 4, 2025
Malicious code in world-id-poap (npm)
3 compromised versions
- Jun 4, 2025
Malicious code in conventional-changelog-action (npm)
1 compromised version
- Jun 4, 2025
Malicious code in @sasmeee/wabetainfo (npm)
- Jun 4, 2025
Malicious code in @sasmeee/tkdl (npm)
- Jun 4, 2025
Malicious code in @sasmeee/test-theme (npm)
- Jun 4, 2025
Malicious code in @sasmeee/ip-locator (npm)
- Jun 4, 2025
Malicious code in @sasmeee/igdl (npm)
- Jun 4, 2025
Malicious code in @sasmeee/gamble (npm)
- Jun 4, 2025
Malicious code in @sasmeee/demoupload2 (npm)
- Jun 4, 2025
Malware in @sasmeee/test-theme
1 compromised version
- Jun 4, 2025
Malware in @sasmeee/igdl
1 compromised version
- Jun 4, 2025
Malware in @sasmeee/ip-locator
1 compromised version
- Jun 4, 2025
Malware in @sasmeee/gamble
1 compromised version
- Jun 4, 2025
Malware in @sasmeee/demoupload2
1 compromised version
- Jun 4, 2025
Malware in @sasmeee/tkdl
1 compromised version
- Jun 4, 2025
Malware in @sasmeee/wabetainfo
1 compromised version
- Jun 4, 2025
Malicious code in pizza-delivery (npm)
1 compromised version
- Jun 4, 2025
Malicious code in sechub-web-ui (npm)
2 compromised versions
- Jun 4, 2025
Malicious code in copy-package-contents (npm)
1 compromised version
- Jun 4, 2025
Malicious code in claude-pr-action (npm)
1 compromised version
- Jun 4, 2025
Malicious code in checkout-sparse (npm)
1 compromised version
- Jun 4, 2025
Malicious code in nethereum-helper-utils (npm)
- Jun 4, 2025
Malicious code in keypair-core-utils (npm)
- Jun 4, 2025
Malware in nethereum-helper-utils
1 compromised version
- Jun 4, 2025
Malware in keypair-core-utils
1 compromised version
- Jun 4, 2025
Malicious code in keypair-decryptor-utils (npm)
- Jun 4, 2025
Malware in keypair-decryptor-utils
1 compromised version
- Jun 4, 2025
Malicious code in ownersv2-obfuscator (npm)
- Jun 4, 2025
Malicious code in haji-fb-toolkit (npm)
- Jun 4, 2025
Malicious code in chatbox-utility (npm)
- Jun 4, 2025
Malicious code in chatbox-fca-remake (npm)
- Jun 4, 2025
Malware in ownersv2-obfuscator
1 compromised version
- Jun 4, 2025
Malware in chatbox-utility
1 compromised version
- Jun 4, 2025
Malware in chatbox-fca-remake
1 compromised version
- Jun 4, 2025
Malware in haji-fb-toolkit
1 compromised version
Page 5855 of 6,634