Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Apr 23, 2025
Malicious code in @sporta-technology/d11-web-components.carousel (npm)
2 compromised versions
- Apr 23, 2025
Malicious code in @sporta-technology/d11-web-components.button (npm)
2 compromised versions
- Apr 23, 2025
Malicious code in @sporta-technology/d11-web-components.breadcrumbs (npm)
2 compromised versions
- Apr 23, 2025
Malicious code in @sporta-technology/d11-web-components.bit-theme-wrapper (npm)
2 compromised versions
- Apr 23, 2025
Malicious code in @sporta-technology/d11-web-components.banner (npm)
2 compromised versions
- Apr 23, 2025
Malicious code in @sporta-technology/d11-web-components.avatar (npm)
2 compromised versions
- Apr 23, 2025
Malicious code in @sporta-technology/d11-web-components.accordion (npm)
2 compromised versions
- Apr 23, 2025
Malicious code in @sas-dvr/ltjs-sasicu (npm)
2 compromised versions
- Apr 23, 2025
Malicious code in @sas-dvr/ltjs-commons (npm)
2 compromised versions
- Apr 23, 2025
Malicious code in @sas-dvr/internal-va-react-core (npm)
2 compromised versions
- Apr 23, 2025
Malicious code in @saferpay/prettier-config (npm)
1 compromised version
- Apr 23, 2025
Malicious code in @medibank-lib/medi-analytics (npm)
1 compromised version
- Apr 23, 2025
Malicious code in @flutterfire/source-versions (npm)
1 compromised version
- Apr 23, 2025
Malicious code in @flutterfire/source-api-reference (npm)
4 compromised versions
- Apr 23, 2025
Malicious code in euf-ele-hf (npm)
1 compromised version
- Apr 23, 2025
Malicious code in express-cookie-parser (npm)
- Apr 23, 2025
Malicious code in windpapi-prebuild (npm)
3 compromised versions
- Apr 23, 2025
Malicious code in nsdhqhlqqka (npm)
- Apr 23, 2025
Malware in nsdhqhlqqka
1 compromised version
- Apr 23, 2025
Malware in windpapi-prebuild
1 compromised version
- Apr 23, 2025
Malicious code in quaoqpdizoqsqdqsd (npm)
- Apr 23, 2025
Malicious code in ds-sudqusdqhsdhqsdzoqi (npm)
- Apr 23, 2025
Malware in ds-sudqusdqhsdhqsdzoqi
1 compromised version
- Apr 23, 2025
Malware in quaoqpdizoqsqdqsd
1 compromised version
- Apr 23, 2025
Malicious code in watch-test-unit (npm)
1 compromised version
- Apr 23, 2025
Malware in watch-test-unit
1 compromised version
- Apr 23, 2025
Malicious code in vertex-lba (npm)
1 compromised version
- Apr 23, 2025
Malicious code in com.adjust.test (npm)
1 compromised version
- Apr 23, 2025
Malware in vertex-lba
1 compromised version
- Apr 23, 2025
Malware in signingroom-app
1 compromised version
- Apr 23, 2025
Malware in com.adjust.test
1 compromised version
- Apr 23, 2025
Malicious code in list.fuzzysearch.js (npm)
- Apr 23, 2025
Malicious code in gombot-crypto-jetpack (npm)
- Apr 23, 2025
Malware in gombot-crypto-jetpack
1 compromised version
- Apr 23, 2025
Malware in list.fuzzysearch.js
1 compromised version
- Apr 23, 2025
Malicious code in log-process (npm)
- Apr 23, 2025
Malware in log-process
1 compromised version
- Apr 23, 2025
Malicious code in cantina-senior-frontend-interview-prompt (npm)
1 compromised version
- Apr 23, 2025
Malware in cantina-senior-frontend-interview-prompt
1 compromised version
- Apr 23, 2025
Malicious code in camel-website (npm)
1 compromised version
- Apr 23, 2025
Malicious code in app-tcm-collab (npm)
1 compromised version
- Apr 23, 2025
Malware in camel-website
1 compromised version
- Apr 23, 2025
Malware in app-tcm-collab
1 compromised version
- Apr 23, 2025
Malicious code in discord.js-selfbot-13 (npm)
1 compromised version
- Apr 23, 2025
Malware in discord.js-selfbot-13
1 compromised version
- Apr 22, 2025
Malicious code in sprocket-webapp-poc (npm)
1 compromised version
- Apr 22, 2025
Malicious code in concurrent-hashmap (npm)
- Apr 21, 2025
Malicious code in slf4j-api-js (npm)
- Apr 20, 2025
Malicious code in studocu-extension-pack (npm)
1 compromised version
- Apr 19, 2025
Malicious code in vault-action (npm)
3 compromised versions
Page 5902 of 6,634