Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jun 4, 2025
Malware in primereact-sass-theme
1 compromised version
- Jun 4, 2025
Malware in ccv-token-manager
1 compromised version
- Jun 4, 2025
Malware in @partners-types/generics
1 compromised version
- Jun 4, 2025
Malware in @worksmobile/wmeet-sdk
1 compromised version
- Jun 4, 2025
Malware in @fronteg/react
1 compromised version
- Jun 4, 2025
Malware in @stepstone-genesis/components
1 compromised version
- Jun 4, 2025
Malware in @mse-entitlement-sdk/react
1 compromised version
- Jun 4, 2025
Malware in @monterosa-sdk/enmasse
1 compromised version
- Jun 4, 2025
Malware in @ing-web-es/application
1 compromised version
- Jun 4, 2025
Malware in @galaxy-nft/frontend
1 compromised version
- Jun 4, 2025
Malware in @fff-web/fff-utilities
1 compromised version
- Jun 4, 2025
Malware in @dbtw/mfe-gateway
1 compromised version
- Jun 4, 2025
Malicious code in espresso-ui (npm)
2 compromised versions
- Jun 4, 2025
Malware in espresso-ui
1 compromised version
- Jun 4, 2025
Malicious code in service-config-provider (npm)
20 compromised versions
- Jun 4, 2025
Malicious code in fluro-ui (npm)
94 compromised versions
- Jun 4, 2025
Malware in service-config-provider
1 compromised version
- Jun 4, 2025
Malware in fluro-ui
1 compromised version
- Jun 4, 2025
Malicious code in some-private-package (npm)
1 compromised version
- Jun 4, 2025
Malware in some-private-package
1 compromised version
- Jun 4, 2025
Malicious code in daenax (npm)
- Jun 4, 2025
Malware in daenax
1 compromised version
- Jun 4, 2025
Malicious code in graphstruct (npm)
- Jun 4, 2025
Malware in graphstruct
1 compromised version
- Jun 4, 2025
Malicious code in tradingv-scraper (npm)
- Jun 4, 2025
Malicious code in system-health-sync-api (npm)
- Jun 4, 2025
Malicious code in portfolio-config-manager-mongo (npm)
- Jun 4, 2025
Malicious code in express-api-sync (npm)
- Jun 4, 2025
Malware in system-health-sync-api
1 compromised version
- Jun 4, 2025
Malware in portfolio-config-manager-mongo
1 compromised version
- Jun 4, 2025
Malware in express-api-sync
1 compromised version
- Jun 4, 2025
Malware in tradingv-scraper
1 compromised version
- Jun 4, 2025
Malware in log5j-v2
1 compromised version
- Jun 4, 2025
Malicious code in figwrap (npm)
- Jun 4, 2025
Malware in figwrap
1 compromised version
- Jun 4, 2025
Malicious code in plugin-svg-icons (npm)
- Jun 4, 2025
Malware in plugin-svg-icons
1 compromised version
- Jun 4, 2025
Malicious code in phlib-config (npm)
- Jun 4, 2025
Malware in phlib-config
1 compromised version
- Jun 4, 2025
Malicious code in @balajih4kr/postcss (npm)
- Jun 4, 2025
Malware in stake-operations-script
1 compromised version
- Jun 4, 2025
Malware in @balajih4kr/postcss
1 compromised version
- Jun 4, 2025
Malware in basic-with-react-hooks
1 compromised version
- Jun 4, 2025
Malware in frontegg-angular-sanity-check
1 compromised version
- Jun 4, 2025
Malware in remote-actions
1 compromised version
- Jun 4, 2025
Malicious code in viryy-nexa (npm)
- Jun 4, 2025
Malicious code in verylinh-sky (npm)
15 compromised versions
- Jun 4, 2025
Malicious code in procentry (npm)
- Jun 4, 2025
Malicious code in nodyne (npm)
- Jun 4, 2025
Malicious code in node-prettier (npm)
Page 5856 of 6,634