Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- May 16, 2025
Malicious code in linemtxworkloadui (npm)
2 compromised versions
- May 16, 2025
Malware in linemtxworkloadui
1 compromised version
- May 16, 2025
Malware in albatross-test2-module
1 compromised version
- May 16, 2025
Malware in this-is-test-module
1 compromised version
- May 16, 2025
Malicious code in node-key (npm)
- May 16, 2025
Malicious code in mongooses-db (npm)
- May 16, 2025
Malware in node-key
1 compromised version
- May 16, 2025
Malware in mongooses-db
1 compromised version
- May 16, 2025
Malicious code in ts-db-indicator (npm)
- May 16, 2025
Malware in ts-db-indicator
1 compromised version
- May 16, 2025
Malicious code in date-min (npm)
- May 16, 2025
Malware in date-min
1 compromised version
- May 16, 2025
Malicious code in grew-plugins (npm)
- May 16, 2025
Malware in grew-plugins
1 compromised version
- May 16, 2025
Malware in ui-platform-business-elements
1 compromised version
- May 16, 2025
Malware in ui-platform-base-components-v2
1 compromised version
- May 16, 2025
Malware in ui-platform-elements
1 compromised version
- May 16, 2025
Malicious code in flow-plugins (npm)
- May 16, 2025
Malware in flow-plugins
1 compromised version
- May 16, 2025
Malicious code in @thekrishnakarn/healthier-app (npm)
- May 16, 2025
Malware in @thekrishnakarn/healthier-app
1 compromised version
- May 16, 2025
Malicious code in convera (npm)
1 compromised version
- May 16, 2025
Malware in convera
1 compromised version
- May 16, 2025
Malicious code in beautiful-plugins (npm)
- May 16, 2025
Malware in beautiful-plugins
1 compromised version
- May 16, 2025
Malicious code in flexible-loggers (npm)
- May 16, 2025
Malware in flexible-loggers
1 compromised version
- May 16, 2025
Malicious code in etherbundle (npm)
- May 16, 2025
Malicious code in dotenv-sdk (npm)
1 compromised version
- May 16, 2025
Malware in dotenv-sdk
1 compromised version
- May 16, 2025
Malware in etherbundle
1 compromised version
- May 16, 2025
Malware in ui-cluster-driver-sks
1 compromised version
- May 16, 2025
Malware in lrc20-js-sdk
1 compromised version
- May 16, 2025
Malware in landsat-tiler
1 compromised version
- May 16, 2025
Malware in buidl-wallet-contracts
1 compromised version
- May 16, 2025
Malware in solhint-plugin-chainlink-solidity
1 compromised version
- May 16, 2025
Malware in world-id-discord
1 compromised version
- May 16, 2025
Malware in minicom-support-client
1 compromised version
- May 16, 2025
Malware in meridian-web-sdk-assets
1 compromised version
- May 16, 2025
Malicious code in internallib_v625 (npm)
1 compromised version
- May 16, 2025
Malicious code in internallib_v370 (npm)
3 compromised versions
- May 16, 2025
Malware in internallib_v370
1 compromised version
- May 16, 2025
Malware in internallib_v625
1 compromised version
- May 16, 2025
Malware in eipsend
1 compromised version
- May 16, 2025
Malicious code in npm-scrapper-faris (npm)
- May 16, 2025
Malicious code in meta-ai-client (npm)
- May 16, 2025
Malicious code in lmk (npm)
- May 16, 2025
Malicious code in let-me-know (npm)
3 compromised versions
- May 16, 2025
Malicious code in ephoto-api-faris (npm)
- May 16, 2025
Malware in let-me-know
1 compromised version
Page 5882 of 6,634