Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- May 23, 2025
Malicious code in e-learning-garena (npm)
1 compromised version
- May 23, 2025
Malware in event-sharing-demo
1 compromised version
- May 23, 2025
Malware in hermes-inspector-msggen
1 compromised version
- May 23, 2025
Malware in inhouse-root
1 compromised version
- May 23, 2025
Malware in e-learning-garena
1 compromised version
- May 23, 2025
Malicious code in wsticket (npm)
- May 23, 2025
Malicious code in mbm-dgacha (npm)
- May 23, 2025
Malicious code in gunbazaar (npm)
- May 23, 2025
Malicious code in data-portal-dwh-apps-fe (npm)
- May 23, 2025
Malicious code in all-star-2019 (npm)
- May 23, 2025
Malware in wsticket
1 compromised version
- May 23, 2025
Malware in mbm-dgacha
1 compromised version
- May 23, 2025
Malware in data-portal-dwh-apps-fe
1 compromised version
- May 23, 2025
Malware in gunbazaar
1 compromised version
- May 23, 2025
Malware in all-star-2019
1 compromised version
- May 23, 2025
Malicious code in web-ssar (npm)
1 compromised version
- May 23, 2025
Malicious code in team-portal (npm)
1 compromised version
- May 23, 2025
Malicious code in sfc-demo (npm)
- May 23, 2025
Malicious code in seamless-sppmy (npm)
1 compromised version
- May 23, 2025
Malicious code in routing-config (npm)
- May 23, 2025
Malicious code in osd_tp_custom_visualizations (npm)
- May 23, 2025
Malicious code in dof-ff (npm)
1 compromised version
- May 23, 2025
Malicious code in customer-center (npm)
1 compromised version
- May 23, 2025
Malicious code in arcademinigame (npm)
1 compromised version
- May 23, 2025
Malicious code in accumulate-win (npm)
- May 23, 2025
Malware in arcademinigame
1 compromised version
- May 23, 2025
Malware in accumulate-win
1 compromised version
- May 23, 2025
Malware in seamless-sppmy
1 compromised version
- May 23, 2025
Malware in web-ssar
1 compromised version
- May 23, 2025
Malware in osd_tp_custom_visualizations
1 compromised version
- May 23, 2025
Malware in team-portal
1 compromised version
- May 23, 2025
Malware in routing-config
1 compromised version
- May 23, 2025
Malware in customer-center
1 compromised version
- May 23, 2025
Malware in sfc-demo
1 compromised version
- May 23, 2025
Malware in dof-ff
1 compromised version
- May 23, 2025
Malicious code in seatalk-rn-leave-calendar (npm)
1 compromised version
- May 23, 2025
Malicious code in netvis (npm)
1 compromised version
- May 23, 2025
Malicious code in input_control_vis (npm)
1 compromised version
- May 23, 2025
Malicious code in hideoutpd (npm)
1 compromised version
- May 23, 2025
Malicious code in env-platform (npm)
1 compromised version
- May 23, 2025
Malware in hideoutpd
1 compromised version
- May 23, 2025
Malware in netvis
1 compromised version
- May 23, 2025
Malware in input_control_vis
1 compromised version
- May 23, 2025
Malware in env-platform
1 compromised version
- May 23, 2025
Malware in seatalk-rn-leave-calendar
1 compromised version
- May 23, 2025
Malicious code in xlog-admin-portal (npm)
1 compromised version
- May 23, 2025
Malicious code in tgi-fe (npm)
- May 23, 2025
Malicious code in tenslots (npm)
- May 23, 2025
Malicious code in sps (npm)
- May 23, 2025
Malicious code in sellyourvault (npm)
1 compromised version
Page 5869 of 6,634