Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- May 21, 2025
Malicious code in string-multiutils (npm)
2 compromised versions
- May 21, 2025
Malware in string-multiutils
1 compromised version
- May 21, 2025
Malicious code in com.meta.xr.sdk.avatars.sample.assets (npm)
- May 21, 2025
Malicious code in br2s-ui-common-utils-02 (npm)
11 compromised versions
- May 21, 2025
Malware in frau-hoster
1 compromised version
- May 21, 2025
Malware in com.meta.xr.sdk.avatars.sample.assets
1 compromised version
- May 21, 2025
Malware in br2s-ui-common-utils-02
1 compromised version
- May 21, 2025
Malicious code in graphorithm (npm)
- May 21, 2025
Malware in graphorithm
1 compromised version
- May 21, 2025
Malicious code in gatsby-mars-pet-parent-journey--server (npm)
- May 21, 2025
Malware in gatsby-mars-pet-parent-journey--server
1 compromised version
- May 21, 2025
Malicious code in @walmart-dataventures/my-package (npm)
- May 21, 2025
Malware in @walmart-dataventures/my-package
1 compromised version
- May 21, 2025
Malware in @walmart-dataventures/integrated-components
1 compromised version
- May 21, 2025
Malicious code in node-wavehttp (npm)
1 compromised version
- May 21, 2025
Malicious code in axios-fingerprint (npm)
7 compromised versions
- May 21, 2025
Malware in axios-fingerprint
1 compromised version
- May 21, 2025
Malware in node-wavehttp
1 compromised version
- May 21, 2025
Malicious code in @ducksthegoatedone/ducks (npm)
- May 21, 2025
Malware in @ducksthegoatedone/ducks
1 compromised version
- May 21, 2025
Malicious code in loveisgood (npm)
- May 21, 2025
Malicious code in loveisalie (npm)
- May 21, 2025
Malware in loveisalie
1 compromised version
- May 21, 2025
Malware in loveisgood
1 compromised version
- May 21, 2025
Malicious code in loveisbad (npm)
- May 21, 2025
Malware in loveisbad
1 compromised version
- May 21, 2025
Malicious code in @shimosre/fingerprintjs (npm)
- May 21, 2025
Malware in @shimosre/fingerprintjs
1 compromised version
- May 21, 2025
Malicious code in react-youtube-dom (npm)
- May 21, 2025
Malware in react-youtube-dom
1 compromised version
- May 21, 2025
Malicious code in @confluence-classic/confluence-frontend-server (npm)
- May 21, 2025
Malicious code in @confluence-classic/confluence-authentication (npm)
- May 21, 2025
Malware in @igain/react-app
1 compromised version
- May 21, 2025
Malware in @confluence-classic/confluence-authentication
1 compromised version
- May 21, 2025
Malware in @confluence-classic/confluence-frontend-server
1 compromised version
- May 21, 2025
Malware in @ai-document-translation/ui-core
1 compromised version
- May 21, 2025
Malware in gx-npm-messenger-util
1 compromised version
- May 21, 2025
Malware in ias-dashboard-assets
1 compromised version
- May 21, 2025
Malware in adobe-appmeasurement
1 compromised version
- May 21, 2025
Malicious code in victim-project (npm)
- May 21, 2025
Malicious code in company-utils (npm)
- May 21, 2025
Malware in victim-project
1 compromised version
- May 21, 2025
Malware in company-utils
1 compromised version
- May 21, 2025
Malicious code in web3walletconnet (npm)
- May 21, 2025
Malicious code in web3walletconnect (npm)
- May 21, 2025
Malicious code in web3automation (npm)
1 compromised version
- May 21, 2025
Malicious code in selfbott-rpc (npm)
1 compromised version
- May 21, 2025
Malicious code in selfbot-v2 (npm)
1 compromised version
- May 21, 2025
Malicious code in selfbot-v1 (npm)
1 compromised version
- May 21, 2025
Malicious code in selfbot-test-2 (npm)
1 compromised version
Page 5876 of 6,634