Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- May 27, 2025
Malicious code in firefox-screenshots (npm)
3 compromised versions
- May 27, 2025
Malware in compensation-calculator
1 compromised version
- May 27, 2025
Malware in front-exporter
1 compromised version
- May 27, 2025
Malware in coreapi-export-template
1 compromised version
- May 27, 2025
Malware in firefox-screenshots
1 compromised version
- May 27, 2025
Malware in madddterialxtest
1 compromised version
- May 27, 2025
Malware in dojo_10
1 compromised version
- May 27, 2025
Malware in maddddddterialxtest
1 compromised version
- May 27, 2025
Malware in wrapper6
1 compromised version
- May 27, 2025
Malware in ideals-theming
1 compromised version
- May 27, 2025
Malware in ideals-services
1 compromised version
- May 27, 2025
Malware in ideals-models
1 compromised version
- May 27, 2025
Malware in ideals-ui-components
1 compromised version
- May 27, 2025
Malware in ideals-utils
1 compromised version
- May 27, 2025
Malware in ideals-types
1 compromised version
- May 27, 2025
Malware in ideals-views
1 compromised version
- May 27, 2025
Malicious code in athira-windows-x64 (npm)
- May 27, 2025
Malicious code in athira-windows-arm64 (npm)
- May 27, 2025
Malicious code in athira (npm)
- May 27, 2025
Malware in athira-windows-x64
1 compromised version
- May 27, 2025
Malware in athira
1 compromised version
- May 27, 2025
Malware in athira-windows-arm64
1 compromised version
- May 27, 2025
Malicious code in thira (npm)
- May 27, 2025
Malicious code in skinnyvans-windows-x64 (npm)
- May 27, 2025
Malicious code in skinnyvans-windows-arm64 (npm)
- May 27, 2025
Malicious code in skinnyvans-linux-x64 (npm)
- May 27, 2025
Malicious code in skinnyvans-linux-arm64 (npm)
- May 27, 2025
Malicious code in skinnyvans-darwin-x64 (npm)
- May 27, 2025
Malicious code in skinnyvans-darwin-arm64 (npm)
- May 27, 2025
Malicious code in skinnyvans (npm)
- May 27, 2025
Malicious code in microbundle-starter (npm)
- May 27, 2025
Malicious code in athira-linux-x64 (npm)
- May 27, 2025
Malicious code in athira-linux-arm64 (npm)
- May 27, 2025
Malicious code in athira-darwin-x64 (npm)
- May 27, 2025
Malicious code in athira-darwin-arm64 (npm)
- May 27, 2025
Malware in athira-darwin-arm64
1 compromised version
- May 27, 2025
Malware in athira-linux-x64
1 compromised version
- May 27, 2025
Malware in skinnyvans-darwin-arm64
1 compromised version
- May 27, 2025
Malware in athira-darwin-x64
1 compromised version
- May 27, 2025
Malware in microbundle-starter
1 compromised version
- May 27, 2025
Malware in skinnyvans-linux-x64
1 compromised version
- May 27, 2025
Malware in thira
1 compromised version
- May 27, 2025
Malware in skinnyvans
1 compromised version
- May 27, 2025
Malware in skinnyvans-windows-arm64
1 compromised version
- May 27, 2025
Malware in skinnyvans-windows-x64
1 compromised version
- May 27, 2025
Malware in skinnyvans-linux-arm64
1 compromised version
- May 27, 2025
Malware in skinnyvans-darwin-x64
1 compromised version
- May 27, 2025
Malware in athira-linux-arm64
1 compromised version
- May 27, 2025
Malicious code in nistagram (npm)
- May 27, 2025
Malware in nistagram
1 compromised version
Page 5862 of 6,634