Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- May 16, 2025
Malware in lmk
1 compromised version
- May 16, 2025
Malware in npm-scrapper-faris
1 compromised version
- May 16, 2025
Malware in ephoto-api-faris
1 compromised version
- May 16, 2025
Malware in meta-ai-client
1 compromised version
- May 16, 2025
Malicious code in vsock-sdk2 (npm)
- May 16, 2025
Malicious code in rollup-plugin-remove-import (npm)
- May 16, 2025
Malicious code in @by-device/fingerprint (npm)
- May 16, 2025
Malware in rollup-plugin-remove-import
1 compromised version
- May 16, 2025
Malware in vsock-sdk2
1 compromised version
- May 16, 2025
Malware in @by-device/fingerprint
1 compromised version
- May 16, 2025
Malware in ngsma-commons
1 compromised version
- May 16, 2025
Malicious code in twitter-api-v1 (npm)
3 compromised versions
- May 16, 2025
Malware in twitter-api-v1
1 compromised version
- May 16, 2025
Malicious code in react-mount-point-unstable (npm)
20 compromised versions
- May 16, 2025
Malicious code in interaction-tracing-metrics (npm)
16 compromised versions
- May 16, 2025
Malicious code in interaction-tracing (npm)
5 compromised versions
- May 16, 2025
Malicious code in feed-testing-utils (npm)
13 compromised versions
- May 16, 2025
Malicious code in fb-error (npm)
11 compromised versions
- May 16, 2025
Malicious code in cube-sign-cli (npm)
6 compromised versions
- May 16, 2025
Malicious code in com.meta.xr.sdk.avatars (npm)
44 compromised versions
- May 16, 2025
Malicious code in bui-react-10 (npm)
4 compromised versions
- May 16, 2025
Malware in feed-testing-utils
1 compromised version
- May 16, 2025
Malware in cube-sign-cli
1 compromised version
- May 16, 2025
Malware in com.meta.xr.sdk.avatars
1 compromised version
- May 16, 2025
Malware in react-mount-point-unstable
1 compromised version
- May 16, 2025
Malware in bui-react-10
1 compromised version
- May 16, 2025
Malware in interaction-tracing-metrics
1 compromised version
- May 16, 2025
Malware in fb-error
1 compromised version
- May 16, 2025
Malware in interaction-tracing
1 compromised version
- May 16, 2025
Malware in flow-multisig
1 compromised version
- May 16, 2025
Malicious code in solara-upgrade (npm)
3 compromised versions
- May 16, 2025
Malicious code in o7rcyti43qv (npm)
2 compromised versions
- May 16, 2025
Malware in o7rcyti43qv
1 compromised version
- May 16, 2025
Malware in solara-upgrade
1 compromised version
- May 16, 2025
Malware in solara-installer
1 compromised version
- May 16, 2025
Malicious code in wagmi-ethers-connectors (npm)
- May 16, 2025
Malicious code in solana-web3 (npm)
- May 16, 2025
Malicious code in nodejs-fetch-proxy (npm)
- May 16, 2025
Malware in solana-web3
1 compromised version
- May 16, 2025
Malware in secure-toolkits
1 compromised version
- May 16, 2025
Malware in wagmi-ethers-connectors
1 compromised version
- May 16, 2025
Malware in nodejs-fetch-proxy
1 compromised version
- May 16, 2025
Malicious code in arcademathjs (npm)
2 compromised versions
- May 16, 2025
Malware in arcademathjs
1 compromised version
- May 16, 2025
Malware in serve-static-corell
1 compromised version
- May 16, 2025
Malware in nativescript-gainsight-px
1 compromised version
- May 16, 2025
Malicious code in mobile-test-px (npm)
- May 16, 2025
Malware in mobile-test-px
1 compromised version
- May 16, 2025
Malicious code in jb-sol-lib (npm)
- May 16, 2025
Malicious code in hardhat-configure (npm)
Page 5883 of 6,634