Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- May 27, 2025
Malicious code in interview-coder-v1 (npm)
- May 27, 2025
Malware in interview-coder-v1
1 compromised version
- May 27, 2025
Malicious code in react_code_format (npm)
6 compromised versions
- May 27, 2025
Malicious code in eslint-format (npm)
9 compromised versions
- May 27, 2025
Malware in react_code_format
1 compromised version
- May 27, 2025
Malware in eslint-format
1 compromised version
- May 27, 2025
Malware in @okdev/boiler_plate
1 compromised version
- May 27, 2025
Malicious code in mockup-js (npm)
- May 27, 2025
Malware in mockup-js
1 compromised version
- May 27, 2025
Malicious code in trip-plugins (npm)
- May 27, 2025
Malware in trip-plugins
1 compromised version
- May 27, 2025
Malicious code in support-plugins (npm)
- May 27, 2025
Malware in support-plugins
1 compromised version
- May 27, 2025
Malicious code in stylelist-plugins (npm)
- May 27, 2025
Malware in stylelist-plugins
1 compromised version
- May 27, 2025
Malicious code in wise-plugins (npm)
- May 27, 2025
Malware in wise-plugins
1 compromised version
- May 27, 2025
Malicious code in zeal-plugins (npm)
- May 27, 2025
Malware in zeal-plugins
1 compromised version
- May 27, 2025
Malicious code in resize-plugins (npm)
- May 27, 2025
Malware in resize-plugins
1 compromised version
- May 27, 2025
Malicious code in wrap-plugins (npm)
- May 27, 2025
Malware in wrap-plugins
1 compromised version
- May 27, 2025
Malicious code in setting-plugins (npm)
- May 27, 2025
Malware in setting-plugins
1 compromised version
- May 27, 2025
Malicious code in vite-plugin-style-svg (npm)
- May 27, 2025
Malicious code in logbin-nodejs (npm)
- May 27, 2025
Malware in vite-plugin-style-svg
1 compromised version
- May 27, 2025
Malware in logbin-nodejs
1 compromised version
- May 27, 2025
Malicious code in yellow-plugins (npm)
- May 27, 2025
Malware in yellow-plugins
1 compromised version
- May 27, 2025
Malicious code in recover-plugins (npm)
- May 27, 2025
Malware in recover-plugins
1 compromised version
- May 27, 2025
Malicious code in vite-tsconfig-pretty (npm)
- May 27, 2025
Malicious code in vite-config-pretty-js (npm)
- May 27, 2025
Malware in vite-config-pretty-js
1 compromised version
- May 27, 2025
Malware in vite-tsconfig-pretty
1 compromised version
- May 27, 2025
Malicious code in style-beautify-plugins (npm)
- May 27, 2025
Malicious code in blur-key (npm)
- May 27, 2025
Malware in blur-key
1 compromised version
- May 27, 2025
Malware in style-beautify-plugins
1 compromised version
- May 26, 2025
Malicious code in @fmr-pr103625/apex-core (npm)
2 compromised versions
- May 26, 2025
Malicious code in eu.netherlands3d.address-search (npm)
- May 26, 2025
Malicious code in mirror-logger-utils (npm)
5 compromised versions
- May 26, 2025
Malicious code in @abacusmirror/react-fontawesome (npm)
- May 26, 2025
Malicious code in muto-kaiju-log (npm)
1 compromised version
- May 26, 2025
Malicious code in ideals-theming (npm)
1 compromised version
- May 26, 2025
Malicious code in ideals-views (npm)
1 compromised version
- May 26, 2025
Malicious code in wrapper6 (npm)
51 compromised versions
- May 26, 2025
Malicious code in fxa-shared-110n (npm)
1 compromised version
Page 5863 of 6,634