Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Apr 30, 2025
Malware in deals1flash
1 compromised version
- Apr 30, 2025
Malware in carcandofilex
1 compromised version
- Apr 30, 2025
Malware in basstiontrestbeesk
1 compromised version
- Apr 30, 2025
Malicious code in redmins (npm)
- Apr 30, 2025
Malware in reducal
1 compromised version
- Apr 30, 2025
Malware in redmins
1 compromised version
- Apr 30, 2025
Malicious code in blur-plugins (npm)
- Apr 30, 2025
Malware in blur-plugins
1 compromised version
- Apr 30, 2025
Malicious code in ngsma-commons (npm)
2 compromised versions
- Apr 29, 2025
Malicious code in @di-sdk/quickselect-wasm (npm)
1 compromised version
- Apr 29, 2025
Malicious code in chai-link (npm)
- Apr 29, 2025
Malware in chai-link
1 compromised version
- Apr 29, 2025
Malicious code in devel-utils (npm)
23 compromised versions
- Apr 29, 2025
Malware in devel-utils
1 compromised version
- Apr 29, 2025
Malicious code in multicogs (npm)
- Apr 29, 2025
Malware in multicogs
1 compromised version
- Apr 29, 2025
Malicious code in nsemea-sample-parenttransaction-lib-poc (npm)
- Apr 29, 2025
Malicious code in nsemea-sample-childtransaction-lib-poc (npm)
- Apr 29, 2025
Malicious code in nsemea-salestransaction-lib-poc (npm)
- Apr 29, 2025
Malicious code in nsemea-quote-lib-poc (npm)
- Apr 29, 2025
Malicious code in nsemea-customer-lib-poc (npm)
- Apr 29, 2025
Malicious code in nsemea-alias-lib-poc (npm)
- Apr 29, 2025
Malicious code in nsemea-address-lib-poc (npm)
- Apr 29, 2025
Malicious code in @baywa-re-lusy/nsemea-salestransaction-lib-poc (npm)
- Apr 29, 2025
Malicious code in @baywa-re-lusy/nsemea-quote-lib-poc (npm)
- Apr 29, 2025
Malicious code in @baywa-re-lusy/nsemea-customer-lib-poc (npm)
- Apr 29, 2025
Malicious code in @baywa-re-lusy/nsemea-core-poc (npm)
- Apr 29, 2025
Malicious code in @baywa-re-lusy/nsemea-alias-lib-poc (npm)
- Apr 29, 2025
Malicious code in @baywa-re-lusy/nsemea-address-lib-poc (npm)
- Apr 29, 2025
Malware in nsemea-quote-lib-poc
1 compromised version
- Apr 29, 2025
Malware in nsemea-alias-lib-poc
1 compromised version
- Apr 29, 2025
Malware in @baywa-re-lusy/nsemea-customer-lib-poc
1 compromised version
- Apr 29, 2025
Malware in @baywa-re-lusy/nsemea-quote-lib-poc
1 compromised version
- Apr 29, 2025
Malware in @baywa-re-lusy/nsemea-salestransaction-lib-poc
1 compromised version
- Apr 29, 2025
Malware in nsemea-customer-lib-poc
1 compromised version
- Apr 29, 2025
Malware in @baywa-re-lusy/nsemea-alias-lib-poc
1 compromised version
- Apr 29, 2025
Malware in @baywa-re-lusy/nsemea-core-poc
1 compromised version
- Apr 29, 2025
Malware in @baywa-re-lusy/nsemea-address-lib-poc
1 compromised version
- Apr 29, 2025
Malware in nsemea-sample-parenttransaction-lib-poc
1 compromised version
- Apr 29, 2025
Malware in nsemea-sample-childtransaction-lib-poc
1 compromised version
- Apr 29, 2025
Malware in nsemea-salestransaction-lib-poc
1 compromised version
- Apr 29, 2025
Malware in nsemea-address-lib-poc
1 compromised version
- Apr 29, 2025
Malicious code in nsemea-salesorder-lib-poc (npm)
- Apr 29, 2025
Malicious code in nsemea-purchaseorder-lib-poc (npm)
- Apr 29, 2025
Malicious code in nsemea-core-poc (npm)
- Apr 29, 2025
Malware in nsemea-core-poc
1 compromised version
- Apr 29, 2025
Malware in nsemea-salesorder-lib-poc
1 compromised version
- Apr 29, 2025
Malware in nsemea-purchaseorder-lib-poc
1 compromised version
- Apr 29, 2025
Malicious code in crypto-encrypt-ts (npm)
- Apr 29, 2025
Malware in crypto-encrypt-ts
1 compromised version
Page 5897 of 6,634