Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- May 6, 2025
Malware in vue-ssr-devtools
1 compromised version
- May 6, 2025
Malicious code in opentk (npm)
1 compromised version
- May 6, 2025
Malware in opentk
1 compromised version
- May 6, 2025
Malicious code in your-published-package (npm)
1 compromised version
- May 6, 2025
Malware in your-published-package
1 compromised version
- May 6, 2025
Malicious code in dayjs-plugin-duration (npm)
1 compromised version
- May 6, 2025
Malware in dayjs-plugin-duration
1 compromised version
- May 6, 2025
Malicious code in platformio (npm)
1 compromised version
- May 6, 2025
Malware in platformio
1 compromised version
- May 6, 2025
Malicious code in jna (npm)
1 compromised version
- May 6, 2025
Malware in jna
1 compromised version
- May 6, 2025
Malicious code in jetty-quic (npm)
1 compromised version
- May 6, 2025
Malware in jetty-quic
1 compromised version
- May 6, 2025
Malicious code in arduinounit (npm)
1 compromised version
- May 6, 2025
Malware in arduinounit
1 compromised version
- May 6, 2025
Malicious code in make-plural-rules (npm)
1 compromised version
- May 6, 2025
Malware in make-plural-rules
1 compromised version
- May 6, 2025
Malicious code in jade-browserify (npm)
1 compromised version
- May 6, 2025
Malware in jade-browserify
1 compromised version
- May 6, 2025
Malicious code in sails-mssql-adapter (npm)
1 compromised version
- May 6, 2025
Malware in sails-mssql-adapter
1 compromised version
- May 6, 2025
Malicious code in meteor-roles (npm)
1 compromised version
- May 6, 2025
Malware in meteor-roles
1 compromised version
- May 6, 2025
Malicious code in apache-httpclient (npm)
1 compromised version
- May 6, 2025
Malware in apache-httpclient
1 compromised version
- May 6, 2025
Malicious code in scheme-latin-1-transcoder (npm)
1 compromised version
- May 6, 2025
Malware in scheme-latin-1-transcoder
1 compromised version
- May 6, 2025
Malicious code in awetz (npm)
11 compromised versions
- May 6, 2025
Malware in awetz
1 compromised version
- May 6, 2025
Malicious code in vite-plugin-remove (npm)
1 compromised version
- May 6, 2025
Malware in vite-plugin-remove
1 compromised version
- May 6, 2025
Malicious code in shaderc (npm)
1 compromised version
- May 6, 2025
Malware in shaderc
1 compromised version
- May 6, 2025
Malicious code in node-jwt-simple (npm)
1 compromised version
- May 6, 2025
Malware in node-jwt-simple
1 compromised version
- May 6, 2025
Malicious code in wdio-healenium-service (npm)
1 compromised version
- May 6, 2025
Malware in wdio-healenium-service
1 compromised version
- May 6, 2025
Malicious code in vite-plugin-node-modules-polyfills (npm)
1 compromised version
- May 6, 2025
Malware in vite-plugin-node-modules-polyfills
1 compromised version
- May 6, 2025
Malicious code in haml-jst-loader (npm)
1 compromised version
- May 6, 2025
Malware in haml-jst-loader
1 compromised version
- May 6, 2025
Malicious code in flashcanvas (npm)
1 compromised version
- May 6, 2025
Malware in flashcanvas
1 compromised version
- May 6, 2025
Malicious code in use-videos (npm)
- May 6, 2025
Malicious code in lucide-node (npm)
- May 6, 2025
Malware in lucide-node
1 compromised version
- May 6, 2025
Malware in use-videos
1 compromised version
- May 6, 2025
Malicious code in kidding (npm)
1 compromised version
- May 6, 2025
Malware in kidding
1 compromised version
- May 6, 2025
Malicious code in windows-api-codec-pack (npm)
1 compromised version
Page 5893 of 6,634