Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- May 18, 2025
Malicious code in morrrisjs (npm)
1 compromised version
- May 17, 2025
Malicious code in sforce (npm)
1 compromised version
- May 17, 2025
Malicious code in novacredit-global2 (npm)
1 compromised version
- May 17, 2025
Malicious code in reload-nucleus-views-on-compile (npm)
1 compromised version
- May 17, 2025
Malicious code in novacredit-global (npm)
8 compromised versions
- May 17, 2025
Malicious code in eslint-config-airbnb-compat (npm)
- May 17, 2025
Malicious code in ts-runtime-compat-check (npm)
- May 17, 2025
Malicious code in blahblahblah-definitely-not-a-real-package-name (npm)
1 compromised version
- May 16, 2025
Malicious code in mfe-react-bridge (npm)
1 compromised version
- May 16, 2025
Malicious code in yamoney-guidelines (npm)
1 compromised version
- May 16, 2025
Malicious code in cdpro-redux-utils (npm)
1 compromised version
- May 16, 2025
Malicious code in inter-frontend-lib-util (npm)
1 compromised version
- May 16, 2025
Malicious code in inter-frontend-hooks (npm)
1 compromised version
- May 16, 2025
Malicious code in maddddddterialxtest (npm)
- May 16, 2025
Malicious code in madddterialxtest (npm)
- May 16, 2025
Malicious code in statewars (npm)
1 compromised version
- May 16, 2025
Malware in statewars
1 compromised version
- May 16, 2025
Malicious code in vue-gop-authenticate (npm)
2 compromised versions
- May 16, 2025
Malicious code in seagroup-assets-management-system (npm)
1 compromised version
- May 16, 2025
Malicious code in lcs-ui-test (npm)
1 compromised version
- May 16, 2025
Malicious code in ingestion-frontend (npm)
1 compromised version
- May 16, 2025
Malicious code in flipper-plugin-preferences (npm)
1 compromised version
- May 16, 2025
Malicious code in driver-app-server (npm)
1 compromised version
- May 16, 2025
Malicious code in codm-onlinematch (npm)
1 compromised version
- May 16, 2025
Malicious code in codm-lucky-shop-pss (npm)
1 compromised version
- May 16, 2025
Malicious code in arcnagacha (npm)
1 compromised version
- May 16, 2025
Malicious code in app-bff-shared (npm)
1 compromised version
- May 16, 2025
Malicious code in api-doc-app (npm)
1 compromised version
- May 16, 2025
Malware in driver-app-server
1 compromised version
- May 16, 2025
Malware in arcnagacha
1 compromised version
- May 16, 2025
Malware in seagroup-assets-management-system
1 compromised version
- May 16, 2025
Malware in vue-gop-authenticate
1 compromised version
- May 16, 2025
Malware in app-bff-shared
1 compromised version
- May 16, 2025
Malware in codm-onlinematch
1 compromised version
- May 16, 2025
Malware in flipper-plugin-preferences
1 compromised version
- May 16, 2025
Malware in api-doc-app
1 compromised version
- May 16, 2025
Malware in codm-lucky-shop-pss
1 compromised version
- May 16, 2025
Malware in lcs-ui-test
1 compromised version
- May 16, 2025
Malware in ingestion-frontend
1 compromised version
- May 16, 2025
Malicious code in xero_ruby_oauth2_app (npm)
- May 16, 2025
Malicious code in packer-docs (npm)
- May 16, 2025
Malicious code in how-sezzle-works (npm)
- May 16, 2025
Malware in how-sezzle-works
1 compromised version
- May 16, 2025
Malware in fwm-poc-built-sites
1 compromised version
- May 16, 2025
Malware in r2-ui
1 compromised version
- May 16, 2025
Malware in @skip-partner/i18n
1 compromised version
- May 16, 2025
Malware in xero_ruby_oauth2_app
1 compromised version
- May 16, 2025
Malware in superhero-turnip
1 compromised version
- May 16, 2025
Malware in antani-ui
1 compromised version
- May 16, 2025
Malware in packer-docs
1 compromised version
Page 5881 of 6,634