Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Apr 19, 2025
Malicious code in parkers-key (npm)
- Apr 19, 2025
Malware in parkers-key
1 compromised version
- Apr 19, 2025
Malicious code in react-x-twitter (npm)
- Apr 19, 2025
Malware in react-x-twitter
1 compromised version
- Apr 19, 2025
Malicious code in router-config (npm)
- Apr 19, 2025
Malware in router-config
1 compromised version
- Apr 19, 2025
Malicious code in fine-packages (npm)
- Apr 19, 2025
Malware in fine-packages
1 compromised version
- Apr 19, 2025
Malicious code in test245334 (npm)
1 compromised version
- Apr 19, 2025
Malicious code in rainbow-sdk (npm)
19 compromised versions
- Apr 19, 2025
Malicious code in node-json-converter (npm)
- Apr 19, 2025
Malware in node-json-converter
1 compromised version
- Apr 19, 2025
Malware in test245334
1 compromised version
- Apr 19, 2025
Malware in rainbow-sdk
1 compromised version
- Apr 18, 2025
Malicious code in arubaiothubdemoapp (npm)
1 compromised version
- Apr 17, 2025
Malicious code in web-sim-control (npm)
1 compromised version
- Apr 17, 2025
Malicious code in r5-wallet (npm)
1 compromised version
- Apr 17, 2025
Malicious code in task-bots (npm)
1 compromised version
- Apr 17, 2025
Malicious code in @0xzyo/confutionrce (npm)
- Apr 17, 2025
Malware in task-bots
1 compromised version
- Apr 17, 2025
Malware in @0xzyo/confutionrce
1 compromised version
- Apr 17, 2025
Malicious code in helper-hoist-variables (npm)
- Apr 17, 2025
Malware in helper-hoist-variables
1 compromised version
- Apr 17, 2025
Malicious code in helper-split-export-declaration (npm)
- Apr 17, 2025
Malicious code in helper-plugin-utils (npm)
- Apr 17, 2025
Malicious code in helper-member-expression-to-functions (npm)
- Apr 17, 2025
Malicious code in helper-get-function-arity (npm)
- Apr 17, 2025
Malicious code in helper-compilation-targets (npm)
- Apr 17, 2025
Malicious code in helper-annotate-as-pure (npm)
- Apr 17, 2025
Malicious code in compat-data (npm)
- Apr 17, 2025
Malware in helper-split-export-declaration
1 compromised version
- Apr 17, 2025
Malware in helper-member-expression-to-functions
1 compromised version
- Apr 17, 2025
Malware in helper-get-function-arity
1 compromised version
- Apr 17, 2025
Malware in compat-data
1 compromised version
- Apr 17, 2025
Malware in helper-plugin-utils
1 compromised version
- Apr 17, 2025
Malware in helper-compilation-targets
1 compromised version
- Apr 17, 2025
Malware in helper-annotate-as-pure
1 compromised version
- Apr 17, 2025
Malicious code in helper-function-name (npm)
- Apr 17, 2025
Malicious code in express-exp (npm)
1 compromised version
- Apr 17, 2025
Malware in helper-function-name
1 compromised version
- Apr 17, 2025
Malware in express-exp
1 compromised version
- Apr 17, 2025
Malicious code in kernelcon-bad-packagexp (npm)
- Apr 17, 2025
Malicious code in fatfingers-hellooo (npm)
- Apr 17, 2025
Malicious code in fatfingers-helloo (npm)
1 compromised version
- Apr 17, 2025
Malicious code in fatfingers-hello (npm)
1 compromised version
- Apr 17, 2025
Malicious code in fatfingers-hahayeet3333 (npm)
2 compromised versions
- Apr 17, 2025
Malicious code in fatfingers-hahayeet333 (npm)
1 compromised version
- Apr 17, 2025
Malicious code in fatfingers-hahayeet33 (npm)
1 compromised version
- Apr 17, 2025
Malicious code in fatfingers-hahayeet3 (npm)
- Apr 17, 2025
Malicious code in fatfingers-hahayeet2 (npm)
Page 5903 of 6,634