Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Apr 3, 2025
Malicious code in twc-app-example-vue (npm)
1 compromised version
- Apr 3, 2025
Malicious code in rzp-ionic3-example (npm)
1 compromised version
- Apr 3, 2025
Malicious code in rif-token-contracts (npm)
1 compromised version
- Apr 3, 2025
Malicious code in rapyd-nodejs (npm)
2 compromised versions
- Apr 3, 2025
Malicious code in phonepe-payment-capacitor-example (npm)
1 compromised version
- Apr 3, 2025
Malicious code in exoscale-order-party-backend (npm)
2 compromised versions
- Apr 3, 2025
Malicious code in debug11 (npm)
1 compromised version
- Apr 3, 2025
Malicious code in accessible-textbook-demo (npm)
2 compromised versions
- Apr 3, 2025
Malware in twc-app-example-vue
1 compromised version
- Apr 3, 2025
Malware in accessible-textbook-demo
1 compromised version
- Apr 3, 2025
Malware in tree-sitter-erlang
1 compromised version
- Apr 3, 2025
Malware in com.unity.testtools.codecoverage
1 compromised version
- Apr 3, 2025
Malware in debug11
1 compromised version
- Apr 3, 2025
Malware in phonepe-payment-capacitor-example
1 compromised version
- Apr 3, 2025
Malware in exoscale-order-party-backend
1 compromised version
- Apr 3, 2025
Malware in gh-find-current-pr
1 compromised version
- Apr 3, 2025
Malware in real-world1
1 compromised version
- Apr 3, 2025
Malware in rif-token-contracts
1 compromised version
- Apr 3, 2025
Malware in lwc-recipes
1 compromised version
- Apr 3, 2025
Malware in rzp-ionic3-example
1 compromised version
- Apr 3, 2025
Malware in rapyd-nodejs
1 compromised version
- Apr 3, 2025
Malicious code in com.henryhoffman.unlockprotocol (npm)
1 compromised version
- Apr 3, 2025
Malware in com.henryhoffman.unlockprotocol
1 compromised version
- Apr 3, 2025
Malware in com.unity.performance.profile-analyzer
1 compromised version
- Apr 3, 2025
Malicious code in risklmtndecisionserv-paypal (npm)
1 compromised version
- Apr 3, 2025
Malicious code in invoicetemplate-paypal (npm)
1 compromised version
- Apr 3, 2025
Malicious code in invoicesettings-paypal (npm)
1 compromised version
- Apr 3, 2025
Malicious code in invoicelifecycle-paypal (npm)
1 compromised version
- Apr 3, 2025
Malicious code in disputeapiserv-paypal (npm)
1 compromised version
- Apr 3, 2025
Malicious code in at-validation-paypal (npm)
1 compromised version
- Apr 3, 2025
Malware in disputeapiserv-paypal
1 compromised version
- Apr 3, 2025
Malware in at-validation-paypal
1 compromised version
- Apr 3, 2025
Malware in invoicetemplate-paypal
1 compromised version
- Apr 3, 2025
Malware in risklmtndecisionserv-paypal
1 compromised version
- Apr 3, 2025
Malware in invoicelifecycle-paypal
1 compromised version
- Apr 3, 2025
Malware in idt-validation-paypal
1 compromised version
- Apr 3, 2025
Malware in invoicesettings-paypal
1 compromised version
- Apr 3, 2025
Malware in paypalmeserv
1 compromised version
- Apr 3, 2025
Malicious code in payoutsapiserv-paypal (npm)
1 compromised version
- Apr 3, 2025
Malware in sendmoneyserv
1 compromised version
- Apr 3, 2025
Malware in payoutsapiserv-paypal
1 compromised version
- Apr 3, 2025
Malicious code in windowsreveal (npm)
- Apr 3, 2025
Malicious code in hide-console-api (npm)
- Apr 3, 2025
Malware in hide-console-api
1 compromised version
- Apr 3, 2025
Malware in windowsreveal
1 compromised version
- Apr 3, 2025
Malicious code in nva-process-inf (npm)
- Apr 3, 2025
Malicious code in nva-pc-inf (npm)
- Apr 3, 2025
Malicious code in nva-direct-showof (npm)
- Apr 3, 2025
Malware in nva-direct-showof
1 compromised version
- Apr 3, 2025
Malware in nva-process-inf
1 compromised version
Page 5910 of 6,634