Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Apr 7, 2025
Malware in vulnerable-dependency
1 compromised version
- Apr 7, 2025
Malicious code in arno-react (npm)
- Apr 7, 2025
Malware in arnotest
1 compromised version
- Apr 7, 2025
Malware in arno-react
1 compromised version
- Apr 7, 2025
Malicious code in pdfgenie (npm)
- Apr 7, 2025
Malware in pdfgenie
1 compromised version
- Apr 7, 2025
Malicious code in nusign (npm)
1 compromised version
- Apr 7, 2025
Malware in nusign
1 compromised version
- Apr 7, 2025
Malicious code in htps-curl (npm)
- Apr 7, 2025
Malicious code in frosty-umbrella (npm)
- Apr 7, 2025
Malware in frosty-umbrella
1 compromised version
- Apr 7, 2025
Malware in htps-curl
1 compromised version
- Apr 7, 2025
Malicious code in shiroisthebest (npm)
- Apr 7, 2025
Malicious code in okmanalright (npm)
- Apr 7, 2025
Malicious code in lovenevergone (npm)
- Apr 7, 2025
Malicious code in goodluckforu (npm)
- Apr 7, 2025
Malicious code in damnbeauty (npm)
- Apr 7, 2025
Malicious code in chickenisgood (npm)
- Apr 7, 2025
Malware in shiroisthebest
1 compromised version
- Apr 7, 2025
Malware in okmanalright
1 compromised version
- Apr 7, 2025
Malware in goodluckforu
1 compromised version
- Apr 7, 2025
Malware in lovenevergone
1 compromised version
- Apr 7, 2025
Malware in damnbeauty
1 compromised version
- Apr 7, 2025
Malware in chickenisgood
1 compromised version
- Apr 7, 2025
Malicious code in search-benchmark-frontend (npm)
- Apr 7, 2025
Malicious code in n11-ui (npm)
1 compromised version
- Apr 7, 2025
Malicious code in legacy-actuator-support (npm)
1 compromised version
- Apr 7, 2025
Malware in n11-ui
1 compromised version
- Apr 7, 2025
Malware in search-benchmark-frontend
1 compromised version
- Apr 7, 2025
Malware in n11-web-client
1 compromised version
- Apr 7, 2025
Malware in n11-chatbot
1 compromised version
- Apr 7, 2025
Malware in legacy-actuator-support
1 compromised version
- Apr 7, 2025
Malware in chatbot-dashboard
1 compromised version
- Apr 7, 2025
Malware in eslint-config-hectorm
1 compromised version
- Apr 7, 2025
Malicious code in stormapp765 (npm)
3 compromised versions
- Apr 7, 2025
Malicious code in ac-localnav (npm)
2 compromised versions
- Apr 7, 2025
Malicious code in ac-async-helpers (npm)
1 compromised version
- Apr 7, 2025
Malware in ac-localnav
1 compromised version
- Apr 7, 2025
Malware in stormapp765
1 compromised version
- Apr 7, 2025
Malware in ac-async-helpers
1 compromised version
- Apr 6, 2025
Malicious code in angular2-tesla-common (npm)
3 compromised versions
- Apr 6, 2025
Malicious code in rlusd (npm)
1 compromised version
- Apr 6, 2025
Malicious code in clarunit (npm)
2 compromised versions
- Apr 5, 2025
Malicious code in amazonui (npm)
1 compromised version
- Apr 5, 2025
Malicious code in @weave-mui/divider (npm)
4 compromised versions
- Apr 5, 2025
Malicious code in internal-utils-bronxi (npm)
3 compromised versions
- Apr 4, 2025
Malicious code in dave-common (npm)
1 compromised version
- Apr 4, 2025
Malicious code in valid-ip-scope (npm)
- Apr 4, 2025
Malicious code in valid-ip-ban (npm)
1 compromised version
- Apr 4, 2025
Malware in valid-ip-scope
1 compromised version
Page 5908 of 6,634