Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 28, 2025
Malicious code in coincheck-test (npm)
1 compromised version
- Mar 28, 2025
Malicious code in coincheck-main (npm)
1 compromised version
- Mar 28, 2025
Malicious code in coincheck-internal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in coincheck-dev (npm)
1 compromised version
- Mar 28, 2025
Malicious code in cloudflare-vite-tutorial (npm)
1 compromised version
- Mar 28, 2025
Malicious code in clay-c4 (npm)
1 compromised version
- Mar 28, 2025
Malicious code in cf-middleware-set-header (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bvox-test (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bvox-main (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bvox-internal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bvox-dev (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bvox (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bsbexample (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitvavo-test (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitvavo-main (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitvavo-internal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitvavo-dev (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitunix-test (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitunix-main (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitunix-internal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitunix-dev (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitrue-test (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitrue-main (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitrue-internal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitrue-dev (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitrue (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bifinance-test (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bifinance-main (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bifinance-internal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bifinance-dev (npm)
1 compromised version
- Mar 28, 2025
Malicious code in azbit-test (npm)
1 compromised version
- Mar 28, 2025
Malicious code in azbit-main (npm)
1 compromised version
- Mar 28, 2025
Malicious code in azbit-internal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in azbit-dev (npm)
1 compromised version
- Mar 28, 2025
Malicious code in azbit (npm)
1 compromised version
- Mar 28, 2025
Malicious code in arkose-labs-react-native-example (npm)
2 compromised versions
- Mar 28, 2025
Malicious code in aem-generated-project (npm)
1 compromised version
- Mar 28, 2025
Malicious code in across-package-test2 (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @vercel-internals/tsconfig (npm)
2 compromised versions
- Mar 28, 2025
Malicious code in @vercel-internals/constants (npm)
2 compromised versions
- Mar 28, 2025
Malicious code in @uniqa/user-preferences-ms-spec-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/user-account-spec-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/ubimet-ms (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/self-service-ms-api-v2 (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/self-service-ms-api-v1 (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/self-registration-spec-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/security-code-ms-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/sales-ms-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/reef (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/partner-masterdata-integration-ms-api (npm)
1 compromised version
Page 5915 of 6,634