Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- May 19, 2025
Malicious code in rpc-tools (npm)
- May 19, 2025
Malware in solana-sniper-bot
1 compromised version
- May 19, 2025
Malware in rpc-tools
1 compromised version
- May 19, 2025
Malicious code in safe-array-push (npm)
2 compromised versions
- May 19, 2025
Malware in safe-array-push
1 compromised version
- May 19, 2025
Malware in wegenenverkeer
1 compromised version
- May 19, 2025
Malicious code in @hm6816/lodash-isequal (npm)
2 compromised versions
- May 19, 2025
Malware in @hm6816/lodash-isequal
1 compromised version
- May 19, 2025
Malicious code in js-lib-const (npm)
- May 19, 2025
Malware in js-lib-const
1 compromised version
- May 19, 2025
Malicious code in foobarzazarazrarzarzararararara (npm)
- May 19, 2025
Malware in foobarzazarazrarzarzararararara
1 compromised version
- May 19, 2025
Malware in client-utility-module
1 compromised version
- May 19, 2025
Malware in client-aem-content-engine
1 compromised version
- May 19, 2025
Malware in mfe-react-bridge
1 compromised version
- May 19, 2025
Malicious code in @farabyabdulla54/wwframework (npm)
1 compromised version
- May 19, 2025
Malware in @farabyabdulla54/wwframework
1 compromised version
- May 19, 2025
Malicious code in soon-night (npm)
- May 19, 2025
Malicious code in social-network-backend (npm)
- May 19, 2025
Malicious code in beta1 (npm)
- May 19, 2025
Malware in social-network-backend
1 compromised version
- May 19, 2025
Malware in beta1
1 compromised version
- May 19, 2025
Malware in soon-night
1 compromised version
- May 19, 2025
Malicious code in secure-data-checker (npm)
3 compromised versions
- May 19, 2025
Malware in secure-data-checker
1 compromised version
- May 19, 2025
Malware in msl-example-client
1 compromised version
- May 19, 2025
Malware in openssl-node
1 compromised version
- May 19, 2025
Malicious code in vue-bit (npm)
- May 19, 2025
Malware in vue-bit
1 compromised version
- May 19, 2025
Malicious code in vue-dummyy (npm)
- May 19, 2025
Malware in vue-dummyy
1 compromised version
- May 19, 2025
Malicious code in vue-dev-serverr (npm)
- May 19, 2025
Malware in vue-dev-serverr
1 compromised version
- May 19, 2025
Malicious code in skip-tot (npm)
- May 19, 2025
Malicious code in os-info-checker-es6 (npm)
- May 19, 2025
Malware in os-info-checker-es6
1 compromised version
- May 19, 2025
Malware in skip-tot
1 compromised version
- May 18, 2025
Malicious code in example-marko-webpack (npm)
1 compromised version
- May 18, 2025
Malicious code in moonpay-sign (npm)
1 compromised version
- May 18, 2025
Malicious code in examples-formic (npm)
2 compromised versions
- May 18, 2025
Malicious code in vscode-oja (npm)
2 compromised versions
- May 18, 2025
Malicious code in human-protocol (npm)
1 compromised version
- May 18, 2025
Malicious code in evo-web (npm)
3 compromised versions
- May 18, 2025
Malicious code in spingroup (npm)
1 compromised version
- May 18, 2025
Malicious code in muto-kaiju-npm-native (npm)
2 compromised versions
- May 18, 2025
Malicious code in node-scoped-http-client (npm)
1 compromised version
- May 18, 2025
Malicious code in pootle (npm)
1 compromised version
- May 18, 2025
Malicious code in logging-plugin (npm)
1 compromised version
- May 18, 2025
Malicious code in eslint-plugin-i18n-strings (npm)
5 compromised versions
- May 18, 2025
Malicious code in dojo_10 (npm)
Page 5880 of 6,634