Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- May 22, 2025
Malicious code in trueye-component-library (npm)
5 compromised versions
- May 22, 2025
Malicious code in test-hello-user-test-npm-com-test (npm)
1 compromised version
- May 22, 2025
Malicious code in tadbir-se (npm)
1 compromised version
- May 22, 2025
Malicious code in t43est-hello-user-test-npm-com-test (npm)
1 compromised version
- May 22, 2025
Malicious code in supplier-common-ui (npm)
2 compromised versions
- May 22, 2025
Malicious code in skeleton-buffer (npm)
2 compromised versions
- May 22, 2025
Malicious code in singlewire-components (npm)
2 compromised versions
- May 22, 2025
Malicious code in shimmer_placeholder (npm)
1 compromised version
- May 22, 2025
Malicious code in sechub-website (npm)
1 compromised version
- May 22, 2025
Malicious code in qasj (npm)
1 compromised version
- May 22, 2025
Malicious code in pulse-candidate (npm)
1 compromised version
- May 22, 2025
Malicious code in pragmatic-drag-and-drop (npm)
1 compromised version
- May 22, 2025
Malicious code in porrtal-workspace (npm)
1 compromised version
- May 22, 2025
Malicious code in o-date (npm)
1 compromised version
- May 22, 2025
Malicious code in matter_build_action (npm)
1 compromised version
- May 22, 2025
Malicious code in manage-this (npm)
1 compromised version
- May 22, 2025
Malicious code in hypernova-simple-example (npm)
1 compromised version
- May 22, 2025
Malicious code in hello-user-test-npm-com-test (npm)
2 compromised versions
- May 22, 2025
Malicious code in gs-uitk-set-utils (npm)
4 compromised versions
- May 22, 2025
Malicious code in gs-uitk-promise-utils (npm)
3 compromised versions
- May 22, 2025
Malicious code in gs-uitk-analytics-common (npm)
4 compromised versions
- May 22, 2025
Malicious code in gs-pwm-utilities (npm)
4 compromised versions
- May 22, 2025
Malicious code in gs-pwm-ooba (npm)
2 compromised versions
- May 22, 2025
Malicious code in glovers-acquisition (npm)
1 compromised version
- May 22, 2025
Malicious code in genesys-lib (npm)
1 compromised version
- May 22, 2025
Malicious code in gatsby-theme-newrelic (npm)
1 compromised version
- May 22, 2025
Malicious code in cryptotax (npm)
1 compromised version
- May 22, 2025
Malicious code in cosmos-multisig-ui (npm)
1 compromised version
- May 22, 2025
Malicious code in cloud-pipeline-run (npm)
1 compromised version
- May 22, 2025
Malicious code in calling-extensions-sdk-demo-minimal-js (npm)
1 compromised version
- May 22, 2025
Malicious code in browser-tests (npm)
1 compromised version
- May 22, 2025
Malicious code in bitcoinjs-lib-v5 (npm)
2 compromised versions
- May 22, 2025
Malicious code in bc-swipe-fade (npm)
1 compromised version
- May 22, 2025
Malicious code in atg-store-addons (npm)
1 compromised version
- May 22, 2025
Malicious code in atg-breakpoints (npm)
1 compromised version
- May 22, 2025
Malicious code in asdfghjklzxcvbnmmnbvcx (npm)
3 compromised versions
- May 22, 2025
Malicious code in @workleap-tracking/logrocket (npm)
2 compromised versions
- May 22, 2025
Malicious code in @webhighlights/shared-components (npm)
1 compromised version
- May 22, 2025
Malicious code in @rf-ui-platform/react-ui-components (npm)
2 compromised versions
- May 22, 2025
Malicious code in @rf-auth/rf-auth-react (npm)
2 compromised versions
- May 22, 2025
Malicious code in @phoenix-common/angular-frontend-library (npm)
1 compromised version
- May 22, 2025
Malicious code in @motortrend/sonic-api (npm)
1 compromised version
- May 22, 2025
Malicious code in @inner-source/ciam-sdk (npm)
2 compromised versions
- May 22, 2025
Malicious code in @ids-beta/tooltip (npm)
1 compromised version
- May 22, 2025
Malicious code in @flapp/inventory-management (npm)
1 compromised version
- May 22, 2025
Malicious code in @enzyme-health/common-models (npm)
2 compromised versions
- May 22, 2025
Malicious code in @dailyapy-rn/rn-push-provisioning (npm)
1 compromised version
- May 22, 2025
Malicious code in @ctg-ui/web-shell-express (npm)
2 compromised versions
- May 22, 2025
Malicious code in @confluent-cfet-medusa/dataset-designer (npm)
2 compromised versions
- May 22, 2025
Malicious code in @character-tech/common (npm)
2 compromised versions
Page 5872 of 6,634