Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- May 19, 2025
Malware in affirmv2
1 compromised version
- May 19, 2025
Malware in shopify-variants
1 compromised version
- May 19, 2025
Malicious code in authvictor (npm)
- May 19, 2025
Malware in authvictor
1 compromised version
- May 19, 2025
Malicious code in wal-eth (npm)
- May 19, 2025
Malware in wal-eth
1 compromised version
- May 19, 2025
Malicious code in valdatr (npm)
- May 19, 2025
Malware in valdatr
1 compromised version
- May 19, 2025
Malicious code in node-validator-ts (npm)
- May 19, 2025
Malware in node-validator-ts
1 compromised version
- May 19, 2025
Malware in @nomicsfondation/hardhat-configs
1 compromised version
- May 19, 2025
Malicious code in postcss-optimizer (npm)
- May 19, 2025
Malicious code in @cashcowprotocol/keccak-crypto (npm)
- May 19, 2025
Malware in @cashcowprotocol/keccak-crypto
1 compromised version
- May 19, 2025
Malware in postcss-optimizer
1 compromised version
- May 19, 2025
Malicious code in dahsjs (npm)
- May 19, 2025
Malware in dahsjs
1 compromised version
- May 19, 2025
Malicious code in dahsj (npm)
- May 19, 2025
Malware in dahsj
1 compromised version
- May 19, 2025
Malicious code in dasjhs (npm)
- May 19, 2025
Malware in dasjhs
1 compromised version
- May 19, 2025
Malicious code in nestjs-translator (npm)
- May 19, 2025
Malware in nestjs-translator
1 compromised version
- May 19, 2025
Malware in acl-icon-font
1 compromised version
- May 19, 2025
Malicious code in web3author (npm)
- May 19, 2025
Malware in web3author
1 compromised version
- May 19, 2025
Malicious code in fanotify (npm)
1 compromised version
- May 19, 2025
Malware in fanotify
1 compromised version
- May 19, 2025
Malicious code in reactbootstraps (npm)
- May 19, 2025
Malware in reactbootstraps
1 compromised version
- May 19, 2025
Malicious code in stencil-cli (npm)
1 compromised version
- May 19, 2025
Malware in stencil-cli
1 compromised version
- May 19, 2025
Malicious code in logdna-agent (npm)
1 compromised version
- May 19, 2025
Malware in logdna-agent
1 compromised version
- May 19, 2025
Malicious code in img_sharp_wasm64 (npm)
- May 19, 2025
Malicious code in babel-loader-fs (npm)
- May 19, 2025
Malware in img_sharp_wasm64
1 compromised version
- May 19, 2025
Malware in babel-loader-fs
1 compromised version
- May 19, 2025
Malicious code in say-hello-npm-world (npm)
- May 19, 2025
Malware in say-hello-npm-world
1 compromised version
- May 19, 2025
Malware in ts-runtime-compat-check
1 compromised version
- May 19, 2025
Malicious code in arduino-mock (npm)
1 compromised version
- May 19, 2025
Malware in arduino-mock
1 compromised version
- May 19, 2025
Malicious code in directx (npm)
1 compromised version
- May 19, 2025
Malware in directx
1 compromised version
- May 19, 2025
Malicious code in kendo-ui (npm)
- May 19, 2025
Malware in kendo-ui
1 compromised version
- May 19, 2025
Malicious code in seaborn (npm)
1 compromised version
- May 19, 2025
Malware in seaborn
1 compromised version
- May 19, 2025
Malicious code in solana-sniper-bot (npm)
Page 5879 of 6,634