Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- May 15, 2025
Malicious code in @support-editor/a0e50092.fcs.pw (npm)
1 compromised version
- May 15, 2025
Malware in a0e50092.fcs.pw
1 compromised version
- May 15, 2025
Malware in @support-editor/a0e50092.fcs.pw
1 compromised version
- May 15, 2025
Malware in @support-editor/mts-editor-dist
1 compromised version
- May 15, 2025
Malicious code in @nx-frontend/bonx-microfrontends (npm)
1 compromised version
- May 15, 2025
Malicious code in @equis/core (npm)
1 compromised version
- May 15, 2025
Malware in @goldenfront/core
1 compromised version
- May 15, 2025
Malware in @nx-frontend/bonx-microfrontends
1 compromised version
- May 15, 2025
Malware in @equis/core
1 compromised version
- May 15, 2025
Malicious code in spl-tokens (npm)
8 compromised versions
- May 15, 2025
Malicious code in mocha-js (npm)
- May 15, 2025
Malicious code in debug-mocha (npm)
- May 15, 2025
Malware in mocha-js
1 compromised version
- May 15, 2025
Malware in spl-tokens
1 compromised version
- May 15, 2025
Malware in debug-mocha
1 compromised version
- May 15, 2025
Malicious code in solanaspl-tokens (npm)
- May 15, 2025
Malware in solanaspl-tokens
1 compromised version
- May 15, 2025
Malware in @dz-lib/dz-cli
1 compromised version
- May 15, 2025
Malware in @bh-ui/theme
1 compromised version
- May 15, 2025
Malware in @hisdk/mail-mac
1 compromised version
- May 15, 2025
Malware in @dz-lib/icon
1 compromised version
- May 15, 2025
Malware in lightbeam-we
1 compromised version
- May 15, 2025
Malware in media_kit_native_event_loop
1 compromised version
- May 15, 2025
Malware in flashcards-sdk-converter
1 compromised version
- May 15, 2025
Malware in tracking-protection-experiment
1 compromised version
- May 15, 2025
Malware in yoga-repo
1 compromised version
- May 15, 2025
Malware in flight_lab_control
1 compromised version
- May 15, 2025
Malware in google.kythe
1 compromised version
- May 15, 2025
Malicious code in shaon-media-downloader (npm)
- May 15, 2025
Malicious code in fca-shaon-project (npm)
- May 15, 2025
Malware in shaon-media-downloader
1 compromised version
- May 15, 2025
Malware in fca-shaon-project
1 compromised version
- May 15, 2025
Malicious code in nayan-videos-downloader (npm)
7 compromised versions
- May 15, 2025
Malware in nayan-videos-downloader
1 compromised version
- May 15, 2025
Malicious code in nayan-imgur-upload-apis (npm)
- May 15, 2025
Malicious code in nayan-apis-server (npm)
- May 15, 2025
Malware in nayan-imgur-upload-apis
1 compromised version
- May 15, 2025
Malware in nayan-apis-server
1 compromised version
- May 15, 2025
Malicious code in imran-photo360-apis (npm)
- May 15, 2025
Malicious code in imran-alldl (npm)
- May 15, 2025
Malicious code in abir-dl (npm)
- May 15, 2025
Malware in abir-dl
1 compromised version
- May 15, 2025
Malware in imran-photo360-apis
1 compromised version
- May 15, 2025
Malware in imran-alldl
1 compromised version
- May 15, 2025
Malicious code in imran-photo-api (npm)
- May 15, 2025
Malware in imran-photo-api
1 compromised version
- May 15, 2025
Malicious code in o1js-wrapper (npm)
- May 15, 2025
Malicious code in ethers-xdc (npm)
5 compromised versions
- May 15, 2025
Malware in pegin-cap-evaluator
1 compromised version
- May 15, 2025
Malware in ethers-xdc
1 compromised version
Page 5886 of 6,634