Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- May 14, 2025
Malicious code in consolidate-logging (npm)
1 compromised version
- May 14, 2025
Malware in consolidate-logging
1 compromised version
- May 14, 2025
Malicious code in next-logging-patcher (npm)
- May 14, 2025
Malware in next-logging-patcher
1 compromised version
- May 14, 2025
Malicious code in aiide-cur (npm)
- May 14, 2025
Malware in aiide-cur
1 compromised version
- May 13, 2025
Malicious code in gltfvariantmeld (npm)
- May 13, 2025
Malicious code in defi-wallet (npm)
2 compromised versions
- May 13, 2025
Malicious code in dep-b (npm)
- May 13, 2025
Malicious code in firefox-devtools (npm)
1 compromised version
- May 13, 2025
Malicious code in mockman-js-plugin (npm)
3 compromised versions
- May 13, 2025
Malware in mockman-js-plugin
1 compromised version
- May 13, 2025
Malicious code in sw-cur1 (npm)
- May 13, 2025
Malicious code in sw-cur (npm)
- May 13, 2025
Malware in sw-cur
1 compromised version
- May 13, 2025
Malware in sw-cur1
1 compromised version
- May 12, 2025
Malicious code in frau-hoster (npm)
- May 12, 2025
Malicious code in @skip-partner/i18n (npm)
- May 12, 2025
Malicious code in odin-backoffice-starter-kit (npm)
5 compromised versions
- May 12, 2025
Malicious code in @myop/vue-remote (npm)
- May 12, 2025
Malicious code in @myop/vue (npm)
- May 12, 2025
Malicious code in @myop/react-remote (npm)
- May 12, 2025
Malicious code in @myop/react (npm)
- May 12, 2025
Malicious code in @myop/n (npm)
- May 12, 2025
Malicious code in @myop/cli (npm)
- May 12, 2025
Malicious code in @myop/angular-remote (npm)
- May 12, 2025
Malicious code in @myop/angular (npm)
- May 12, 2025
Withdrawn Advisory: Malware in @myop/vue-remote
1 compromised version
- May 12, 2025
Withdrawn Advisory: Malware in @myop/cli
1 compromised version
- May 12, 2025
Withdrawn Advisory: Malware in @myop/react-remote
1 compromised version
- May 12, 2025
Malware in @myop/n
1 compromised version
- May 12, 2025
Withdrawn Advisory: Malware in @myop/vue
1 compromised version
- May 12, 2025
Withdrawn Advisory: Malware in @myop/angular-remote
1 compromised version
- May 12, 2025
Withdrawn Advisory: Malware in @myop/angular
1 compromised version
- May 12, 2025
Withdrawn Advisory: Malware in @myop/react
1 compromised version
- May 12, 2025
Malicious code in @myop/sdk (npm)
- May 12, 2025
Withdrawn Advisory: Malware in @myop/sdk
1 compromised version
- May 12, 2025
Malicious code in util-buffers (npm)
- May 12, 2025
Malware in util-buffers
1 compromised version
- May 12, 2025
Malicious code in dependencyconfusion6 (npm)
- May 12, 2025
Malware in dependencyconfusion6
1 compromised version
- May 12, 2025
Malware in @gfgtech/ui
1 compromised version
- May 12, 2025
Malicious code in just-a-cute-script (npm)
- May 12, 2025
Malicious code in astro-scripts (npm)
- May 12, 2025
Malware in just-a-cute-script
1 compromised version
- May 12, 2025
Malware in astro-scripts
1 compromised version
- May 12, 2025
Malicious code in nimiq-supply-calculator (npm)
- May 12, 2025
Malicious code in backstage-plugin-kubernetes-backend (npm)
- May 12, 2025
Malware in nimiq-supply-calculator
1 compromised version
- May 12, 2025
Malware in backstage-plugin-kubernetes-backend
1 compromised version
Page 5888 of 6,634