Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jun 4, 2025
Malicious code in node-pkg-state (npm)
- Jun 4, 2025
Malicious code in modsys-cloud (npm)
- Jun 4, 2025
Malicious code in canvas-helper-kit (npm)
- Jun 4, 2025
Malware in verylinh-sky
1 compromised version
- Jun 4, 2025
Malware in node-prettier
1 compromised version
- Jun 4, 2025
Malware in procentry
1 compromised version
- Jun 4, 2025
Malware in modsys-cloud
1 compromised version
- Jun 4, 2025
Malware in node-pkg-state
1 compromised version
- Jun 4, 2025
Malware in nodyne
1 compromised version
- Jun 4, 2025
Malware in canvas-helper-kit
1 compromised version
- Jun 4, 2025
Malware in viryy-nexa
1 compromised version
- Jun 3, 2025
Malicious code in new-presentation-api (npm)
2 compromised versions
- Jun 3, 2025
Malicious code in esm-imports (npm)
- Jun 3, 2025
Malicious code in minimal-ts-webpack (npm)
2 compromised versions
- Jun 3, 2025
Malicious code in basic-with-react-hooks (npm)
- Jun 3, 2025
Malicious code in adobe-parcel-transformer-test-app (npm)
- Jun 3, 2025
Malicious code in actions-languageservice (npm)
1 compromised version
- Jun 3, 2025
Malicious code in stake-operations-script (npm)
- Jun 3, 2025
Malicious code in frontegg-angular-sanity-check (npm)
- Jun 3, 2025
Malicious code in remote-actions (npm)
- Jun 3, 2025
Malware in prod-env-variables
1 compromised version
- Jun 3, 2025
Malware in vue-black-dashboard
1 compromised version
- Jun 3, 2025
Malware in @majidalfuttaim/maf-ui
1 compromised version
- Jun 3, 2025
Malware in terraform-provider-leaseweb
1 compromised version
- Jun 3, 2025
Malware in @mc-donate/donateweb
1 compromised version
- Jun 3, 2025
Malware in lib-wallet-pay-btc
1 compromised version
- Jun 3, 2025
Malicious code in ua-aio-h5-client (npm)
2 compromised versions
- Jun 3, 2025
Malicious code in omise-woocommerce (npm)
2 compromised versions
- Jun 3, 2025
Malicious code in atlas-global-npm (npm)
2 compromised versions
- Jun 3, 2025
Malware in mergify-browser-extension
1 compromised version
- Jun 3, 2025
Malware in pkurbatsky-uni-kit
1 compromised version
- Jun 3, 2025
Malware in ua-aio-h5-client
1 compromised version
- Jun 3, 2025
Malware in atlas-global-npm
1 compromised version
- Jun 3, 2025
Malware in omise-woocommerce
1 compromised version
- Jun 3, 2025
Malware in parabol-action
1 compromised version
- Jun 3, 2025
Malicious code in https-parse (npm)
- Jun 3, 2025
Malware in https-parse
1 compromised version
- Jun 3, 2025
Malicious code in blipkitgit (npm)
1 compromised version
- Jun 3, 2025
Malware in blipkitgit
1 compromised version
- Jun 2, 2025
Malicious code in test_for-pentest_test_dependcie (npm)
1 compromised version
- Jun 2, 2025
Malicious code in test_for-pentest (npm)
1 compromised version
- Jun 2, 2025
Malicious code in educational-depconf-poc (npm)
- Jun 2, 2025
Malicious code in vue-black-dashboard (npm)
- Jun 2, 2025
Malicious code in lib-wallet-pay-btc (npm)
- Jun 2, 2025
Malicious code in terraform-provider-leaseweb (npm)
- Jun 2, 2025
Malicious code in parabol-action (npm)
- Jun 2, 2025
Malicious code in vite-logging-patchers (npm)
- Jun 2, 2025
Malware in vite-logging-patchers
1 compromised version
- Jun 2, 2025
Malicious code in staking-eth (npm)
- Jun 2, 2025
Malware in staking-eth
1 compromised version
Page 5857 of 6,634