Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Apr 28, 2025
Malicious code in graphhopper-js-ui (npm)
1 compromised version
- Apr 28, 2025
Malware in graphhopper-js-ui
1 compromised version
- Apr 28, 2025
Malware in vonage-status-panel
1 compromised version
- Apr 28, 2025
Malicious code in uignite (npm)
- Apr 28, 2025
Malware in uignite
1 compromised version
- Apr 28, 2025
Malicious code in @zener-soft-consulting/ab-webcomponents-library (npm)
4 compromised versions
- Apr 28, 2025
Malware in @zener-soft-consulting/ab-webcomponents-library
1 compromised version
- Apr 28, 2025
Malicious code in myexampledoges (npm)
- Apr 28, 2025
Malicious code in mydoges (npm)
- Apr 28, 2025
Malware in mydoges
1 compromised version
- Apr 28, 2025
Malware in myexampledoges
1 compromised version
- Apr 28, 2025
Malicious code in testdoges (npm)
- Apr 28, 2025
Malicious code in doges (npm)
2 compromised versions
- Apr 28, 2025
Malware in testdoges
1 compromised version
- Apr 28, 2025
Malware in doges
1 compromised version
- Apr 26, 2025
Malicious code in climate-wallet (npm)
1 compromised version
- Apr 26, 2025
Malicious code in besec (npm)
1 compromised version
- Apr 26, 2025
Malicious code in amazon-chime-sdk-js-exp (npm)
5 compromised versions
- Apr 26, 2025
Malicious code in my-rei-browser-shim (npm)
2 compromised versions
- Apr 25, 2025
Malicious code in freo-design-system (npm)
2 compromised versions
- MAL-2025-3395Malwarenpmdowload_ebok_warrior_cats_vision_von_schatten_die_mission_de_by_erin_hunter_djec8Apr 25, 2025
Malicious code in dowload_ebok_warrior_cats_vision_von_schatten_die_mission_de_by_erin_hunter_djec8 (npm)
- Apr 25, 2025
Malicious code in dowload_ebok_verrassend_aanzoek_by_andie_brock_4mly7 (npm)
- Apr 25, 2025
Malicious code in dowload_ebok_tragic_design_by_jonathan_shariat_cynthia_savard_saucier_0jkyy (npm)
- MAL-2025-3392Malwarenpmdowload_ebok_si_la_verdad_te_incomoda_no_leas_este_libro_by_armando_r_manjarres_0qwtaApr 25, 2025
Malicious code in dowload_ebok_si_la_verdad_te_incomoda_no_leas_este_libro_by_armando_r_manjarres_0qwta (npm)
- MAL-2025-3390Malwarenpmdowload_ebok_historia_do_movimento_pentecostal_no_brasil_by_isael_de_araujo_k3o0zApr 25, 2025
Malicious code in dowload_ebok_historia_do_movimento_pentecostal_no_brasil_by_isael_de_araujo_k3o0z (npm)
- Apr 25, 2025
Malicious code in dowload_ebok_he_is_a_beast_t04_by_saki_aikawa_9bj30 (npm)
- Apr 25, 2025
Malicious code in dowload_ebok_englens_spil_by_carlos_ruiz_zafon_iben_hasselbalch_lqvq8 (npm)
- MAL-2025-3387Malwarenpmdowload_ebok_a_bela_e_a_fera_by_elizabeth_rudnick_evan_spiliotopoulos_stephen_ch_9ooeyApr 25, 2025
Malicious code in dowload_ebok_a_bela_e_a_fera_by_elizabeth_rudnick_evan_spiliotopoulos_stephen_ch_9ooey (npm)
- Apr 25, 2025
Malware in dowload_ebok_englens_spil_by_carlos_ruiz_zafon_iben_hasselbalch_lqvq8
1 compromised version
- Apr 25, 2025
Malware in dowload_ebok_verrassend_aanzoek_by_andie_brock_4mly7
1 compromised version
- GHSA-724r-2r78-f6g9Malwarenpmdowload_ebok_warrior_cats_vision_von_schatten_die_mission_de_by_erin_hunter_djec8Apr 25, 2025
Malware in dowload_ebok_warrior_cats_vision_von_schatten_die_mission_de_by_erin_hunter_djec8
1 compromised version
- GHSA-5xpv-h6xh-p7hfMalwarenpmdowload_ebok_tragic_design_by_jonathan_shariat_cynthia_savard_saucier_0jkyyApr 25, 2025
Malware in dowload_ebok_tragic_design_by_jonathan_shariat_cynthia_savard_saucier_0jkyy
1 compromised version
- GHSA-59hh-rhj8-vh66Malwarenpmdowload_ebok_a_bela_e_a_fera_by_elizabeth_rudnick_evan_spiliotopoulos_stephen_ch_9ooeyApr 25, 2025
Malware in dowload_ebok_a_bela_e_a_fera_by_elizabeth_rudnick_evan_spiliotopoulos_stephen_ch_9ooey
1 compromised version
- Apr 25, 2025
Malware in dowload_ebok_he_is_a_beast_t04_by_saki_aikawa_9bj30
1 compromised version
- GHSA-4r67-q2v9-68wrMalwarenpmdowload_ebok_historia_do_movimento_pentecostal_no_brasil_by_isael_de_araujo_k3o0zApr 25, 2025
Malware in dowload_ebok_historia_do_movimento_pentecostal_no_brasil_by_isael_de_araujo_k3o0z
1 compromised version
- GHSA-2vp3-9rpr-vgh6Malwarenpmdowload_ebok_si_la_verdad_te_incomoda_no_leas_este_libro_by_armando_r_manjarres_0qwtaApr 25, 2025
Malware in dowload_ebok_si_la_verdad_te_incomoda_no_leas_este_libro_by_armando_r_manjarres_0qwta
1 compromised version
- MAL-2025-3391Malwarenpmdowload_ebok_krebszellen_mogen_keine_himbeeren_aktualisierte_by_prof_dr_med_richard_beliveau_dr_med_denis_g_505sjApr 25, 2025
Malicious code in dowload_ebok_krebszellen_mogen_keine_himbeeren_aktualisierte_by_prof_dr_med_richard_beliveau_dr_med_denis_g_505sj (npm)
- GHSA-657w-hrrp-r342Malwarenpmdowload_ebok_krebszellen_mogen_keine_himbeeren_aktualisierte_by_prof_dr_med_richard_beliveau_dr_med_denis_g_505sjApr 25, 2025
Malware in dowload_ebok_krebszellen_mogen_keine_himbeeren_aktualisierte_by_prof_dr_med_richard_beliveau_dr_med_denis_g_505sj
1 compromised version
- Apr 24, 2025
Malicious code in digital-retail-falabella-unified-login (npm)
1 compromised version
- Apr 24, 2025
Malicious code in discord-vc-manager (npm)
1 compromised version
- Apr 24, 2025
Malicious code in echo-color (npm)
1 compromised version
- Apr 24, 2025
Malicious code in keypair-encryptor (npm)
- Apr 24, 2025
Malware in keypair-encryptor
1 compromised version
- Apr 24, 2025
Malicious code in poc-sim (npm)
2 compromised versions
- Apr 24, 2025
Malicious code in poc-npm-hooks (npm)
1 compromised version
- Apr 24, 2025
Malicious code in @template-builder/iframe-api (npm)
1 compromised version
- Apr 24, 2025
Malicious code in rose-bn (npm)
1 compromised version
- Apr 23, 2025
Malicious code in test-kaks3c (npm)
2 compromised versions
- Apr 23, 2025
Malicious code in zocslib (npm)
1 compromised version
- Apr 23, 2025
Malicious code in wertawana (npm)
1 compromised version
Page 5899 of 6,634