Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- May 11, 2025
Malicious code in com.unity.render-pipelines.universal-config (npm)
1 compromised version
- May 11, 2025
Malicious code in com.unity.rendering.light-transport (npm)
1 compromised version
- May 11, 2025
Malicious code in gear-idea-common (npm)
1 compromised version
- May 11, 2025
Malicious code in @nitro2/shared (npm)
1 compromised version
- May 10, 2025
Malicious code in com.unity.formats.fbx (npm)
1 compromised version
- May 10, 2025
Malicious code in com.unity.robotics.warehouse.base (npm)
1 compromised version
- May 10, 2025
Malicious code in com.unity.furioos-connection-kit (npm)
1 compromised version
- May 10, 2025
Malicious code in com.unity.perception (npm)
1 compromised version
- May 10, 2025
Malicious code in com.unity.rpc (npm)
1 compromised version
- May 10, 2025
Malicious code in com.unity.cluster-display (npm)
1 compromised version
- May 10, 2025
Malicious code in com.unity.platforms (npm)
1 compromised version
- May 10, 2025
Malicious code in solhint-plugin-chainlink-solidity (npm)
1 compromised version
- May 10, 2025
Malicious code in com.unity.scripting.python (npm)
1 compromised version
- May 10, 2025
Malicious code in com.unity.list-view-framework (npm)
1 compromised version
- May 10, 2025
Malicious code in braze-i18n-knockout (npm)
1 compromised version
- May 9, 2025
Malicious code in fwm-poc-built-sites (npm)
2 compromised versions
- May 9, 2025
Malicious code in ace-tools (npm)
2 compromised versions
- May 9, 2025
Malicious code in braze-cordova-sdk (npm)
1 compromised version
- May 9, 2025
Malicious code in @phone_base_ui/base_call (npm)
1 compromised version
- May 8, 2025
Malicious code in opensource.ripple.com (npm)
1 compromised version
- May 8, 2025
Malicious code in @dm3-org/dm3-lib-shared (npm)
1 compromised version
- May 8, 2025
Malicious code in @ltcp/ui (npm)
1 compromised version
- May 8, 2025
Malicious code in @cewe-phoenix-themes/default-theme (npm)
1 compromised version
- May 8, 2025
Malicious code in @walmart-dataventures/integrated-components (npm)
3 compromised versions
- May 8, 2025
Malicious code in @sage-org/fabric-ui-root-config (npm)
2 compromised versions
- May 8, 2025
Malicious code in airmason-employee (npm)
1 compromised version
- May 7, 2025
Malicious code in @flcore/login (npm)
2 compromised versions
- May 7, 2025
Malicious code in albatross-test2-module (npm)
1 compromised version
- May 7, 2025
Malicious code in @chat-components/common (npm)
2 compromised versions
- May 7, 2025
Malicious code in r2-ui (npm)
1 compromised version
- May 7, 2025
Malicious code in antani-ui (npm)
1 compromised version
- May 7, 2025
Malicious code in superhero-turnip (npm)
1 compromised version
- May 7, 2025
Malicious code in yandex-lego (npm)
1 compromised version
- May 7, 2025
Malicious code in gx-npm-messenger-util (npm)
1 compromised version
- May 7, 2025
Malicious code in ias-dashboard-assets (npm)
1 compromised version
- May 7, 2025
Malicious code in adobe-appmeasurement (npm)
1 compromised version
- May 7, 2025
Malicious code in @ai-document-translation/ui-core (npm)
1 compromised version
- May 7, 2025
Malicious code in internal-lib-t1 (npm)
5 compromised versions
- May 7, 2025
Malicious code in ascpc-npm-example (npm)
- May 7, 2025
Malware in ascpc-npm-example
1 compromised version
- May 7, 2025
Malware in internal-lib-t1
1 compromised version
- May 7, 2025
Malicious code in identityaccesspointsrv (npm)
1 compromised version
- May 7, 2025
Malware in identityaccesspointsrv
1 compromised version
- May 7, 2025
Malware in @di-sdk/quickselect-wasm
1 compromised version
- May 7, 2025
Malicious code in @starkgate/web (npm)
- May 7, 2025
Malicious code in @oracle-cx-commerce/commerce-utils (npm)
- May 7, 2025
Malicious code in @klarna-travel-platform/travel-booking-shared-types (npm)
1 compromised version
- May 7, 2025
Malicious code in @johndeere-tech/helios-ng-components (npm)
1 compromised version
- May 7, 2025
Malicious code in @johndeere-tech/eslint-plugin-timbercloud-custom-rules (npm)
1 compromised version
- May 7, 2025
Malware in @oracle-cx-commerce/commerce-utils
1 compromised version
Page 5890 of 6,634