Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- May 23, 2025
Malicious code in sudapam (npm)
- May 23, 2025
Malicious code in leetrjohn (npm)
- May 23, 2025
Malicious code in leaderjohn (npm)
- May 23, 2025
Malware in sudapam
1 compromised version
- May 23, 2025
Malware in leaderjohn
1 compromised version
- May 23, 2025
Malware in leetrjohn
1 compromised version
- May 23, 2025
Malicious code in upyun-uploader (npm)
- May 23, 2025
Malicious code in prettier-config-rth (npm)
- May 23, 2025
Malware in upyun-uploader
1 compromised version
- May 23, 2025
Malware in prettier-config-rth
1 compromised version
- May 23, 2025
Malicious code in rth-host-helper (npm)
- May 23, 2025
Malicious code in eslint-config-rth (npm)
- May 23, 2025
Malware in eslint-config-rth
1 compromised version
- May 23, 2025
Malware in rth-host-helper
1 compromised version
- May 23, 2025
Malicious code in makitest_npm (npm)
- May 23, 2025
Malware in makitest_npm
1 compromised version
- May 23, 2025
Malicious code in zdauth (npm)
- May 23, 2025
Malicious code in seatable (npm)
1 compromised version
- May 23, 2025
Malicious code in rapper-wish (npm)
- May 23, 2025
Malicious code in raffle-node (npm)
- May 23, 2025
Malicious code in performance-appraisal (npm)
- May 23, 2025
Malicious code in mix-hub-web (npm)
- May 23, 2025
Malicious code in index_patterns_test_plugin (npm)
1 compromised version
- May 23, 2025
Malicious code in gop_status_frontend (npm)
1 compromised version
- May 23, 2025
Malicious code in credit-risk (npm)
- May 23, 2025
Malicious code in chromastore (npm)
- May 23, 2025
Malicious code in choosetreasure (npm)
- May 23, 2025
Malicious code in 12octsportsday (npm)
- May 23, 2025
Malware in mix-hub-web
1 compromised version
- May 23, 2025
Malware in credit-risk
1 compromised version
- May 23, 2025
Malware in 12octsportsday
1 compromised version
- May 23, 2025
Malware in raffle-node
1 compromised version
- May 23, 2025
Malware in zdauth
1 compromised version
- May 23, 2025
Malware in index_patterns_test_plugin
1 compromised version
- May 23, 2025
Malware in gop_status_frontend
1 compromised version
- May 23, 2025
Malware in rapper-wish
1 compromised version
- May 23, 2025
Malware in choosetreasure
1 compromised version
- May 23, 2025
Malware in performance-appraisal
1 compromised version
- May 23, 2025
Malware in seatable
1 compromised version
- May 23, 2025
Malware in chromastore
1 compromised version
- May 23, 2025
Malicious code in template-vite (npm)
1 compromised version
- May 23, 2025
Malicious code in bkwebportal (npm)
1 compromised version
- May 23, 2025
Malicious code in appium-rn-id (npm)
1 compromised version
- May 23, 2025
Malware in template-vite
1 compromised version
- May 23, 2025
Malware in bkwebportal
1 compromised version
- May 23, 2025
Malware in appium-rn-id
1 compromised version
- May 23, 2025
Malware in flipper-plugins
1 compromised version
- May 23, 2025
Malicious code in inhouse-root (npm)
1 compromised version
- May 23, 2025
Malicious code in hermes-inspector-msggen (npm)
1 compromised version
- May 23, 2025
Malicious code in event-sharing-demo (npm)
1 compromised version
Page 5868 of 6,634