Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- May 22, 2025
Malicious code in @character-tech/client-common (npm)
2 compromised versions
- May 22, 2025
Malicious code in @bmwfedev/playwright-helpers (npm)
1 compromised version
- May 22, 2025
Malicious code in vite-tsconsole-log (npm)
- May 22, 2025
Malicious code in staking-config (npm)
- May 22, 2025
Malware in vite-tsconsole-log
1 compromised version
- May 22, 2025
Malware in staking-config
1 compromised version
- May 22, 2025
Malicious code in node-smtp-mailer (npm)
- May 22, 2025
Malware in node-smtp-mailer
1 compromised version
- May 22, 2025
Malicious code in node-facebook-messenger-api (npm)
- May 22, 2025
Malware in node-facebook-messenger-api
1 compromised version
- May 22, 2025
Malicious code in pumptoolforvolumeandcomment (npm)
- May 22, 2025
Malware in pumptoolforvolumeandcomment
1 compromised version
- May 22, 2025
Malicious code in debugdogs (npm)
- May 22, 2025
Malware in debugdogs
1 compromised version
- May 22, 2025
Malicious code in node-telegram-utils (npm)
- May 22, 2025
Malicious code in node-telegram-util (npm)
- May 22, 2025
Malicious code in node-telegram-bots-api (npm)
1 compromised version
- May 22, 2025
Malware in node-telegram-bots-api
1 compromised version
- May 22, 2025
Malware in node-telegram-util
1 compromised version
- May 22, 2025
Malware in node-telegram-utils
1 compromised version
- May 22, 2025
Malicious code in icloud-sod (npm)
4 compromised versions
- May 22, 2025
Malware in icloud-sod
1 compromised version
- May 22, 2025
Malicious code in rest-icon-orchestrator (npm)
- May 22, 2025
Malicious code in rest-api-orchestrator (npm)
- May 22, 2025
Malware in rest-icon-orchestrator
1 compromised version
- May 22, 2025
Malware in rest-api-orchestrator
1 compromised version
- May 22, 2025
Malicious code in react-native-scrollpageviewtest (npm)
- May 22, 2025
Malware in react-native-scrollpageviewtest
1 compromised version
- May 22, 2025
Malicious code in n8n-nodes-zalo-user (npm)
- May 22, 2025
Malware in n8n-nodes-zalo-user
1 compromised version
- May 22, 2025
Malicious code in cryptopay-button (npm)
22 compromised versions
- May 22, 2025
Malware in cryptopay-button
1 compromised version
- May 22, 2025
Malicious code in vue-vibe (npm)
- May 22, 2025
Malicious code in axios.js (npm)
- May 22, 2025
Malware in axios.js
1 compromised version
- May 22, 2025
Malware in vue-vibe
1 compromised version
- May 22, 2025
Malicious code in pdfgenei (npm)
1 compromised version
- May 22, 2025
Malware in pdfgenei
1 compromised version
- May 21, 2025
Malware in zas-design-system
1 compromised version
- May 21, 2025
Malware in placeholdr
1 compromised version
- May 21, 2025
Malware in dave-common
1 compromised version
- May 21, 2025
Malicious code in solsniperbyagave (npm)
1 compromised version
- May 21, 2025
Malware in solsniperbyagave
1 compromised version
- May 21, 2025
Malicious code in keypair-encrypt-utils (npm)
- May 21, 2025
Malware in keypair-encrypt-utils
1 compromised version
- May 21, 2025
Malicious code in ultimatepower (npm)
1 compromised version
- May 21, 2025
Malicious code in migrate-lol-account (npm)
1 compromised version
- May 21, 2025
Malicious code in lolnews (npm)
- May 21, 2025
Malicious code in lol-rp-raffle (npm)
- May 21, 2025
Malicious code in lol-ninegacha (npm)
1 compromised version
Page 5873 of 6,634