Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 28, 2025
Malicious code in gg-module (npm)
- Mar 28, 2025
Malicious code in gg-key-listener (npm)
- Mar 28, 2025
Malware in gg-module
1 compromised version
- Mar 28, 2025
Malware in resolver-options
1 compromised version
- Mar 28, 2025
Malware in gg-key-listener
1 compromised version
- Mar 28, 2025
Malicious code in toc-generator-markdown (npm)
- Mar 28, 2025
Malicious code in file-auto-cleaner (npm)
- Mar 28, 2025
Malware in file-auto-cleaner
1 compromised version
- Mar 28, 2025
Malware in toc-generator-markdown
1 compromised version
- Mar 28, 2025
Malicious code in dir-auto-backup (npm)
- Mar 28, 2025
Malware in dir-auto-backup
1 compromised version
- Mar 28, 2025
Malicious code in loka12 (npm)
- Mar 28, 2025
Malicious code in f0-state-holder-duke (npm)
- Mar 28, 2025
Malware in loka12
1 compromised version
- Mar 28, 2025
Malware in f0-state-holder-duke
1 compromised version
- Mar 28, 2025
Malicious code in keradsdsdsdsddsdaaqw (npm)
- Mar 28, 2025
Malicious code in f0-data-collection-service-mock (npm)
1 compromised version
- Mar 28, 2025
Malware in keradsdsdsdsddsdaaqw
1 compromised version
- Mar 28, 2025
Malware in f0-data-collection-service-mock
1 compromised version
- Mar 28, 2025
Malicious code in login-paypal (npm)
13 compromised versions
- Mar 28, 2025
Malware in login-paypal
1 compromised version
- Mar 28, 2025
Malicious code in timezone-tool (npm)
- Mar 28, 2025
Malicious code in smart-file-renamer (npm)
- Mar 28, 2025
Malware in smart-file-renamer
1 compromised version
- Mar 28, 2025
Malware in timezone-tool
1 compromised version
- Mar 28, 2025
Malicious code in dir-tree-generator (npm)
- Mar 28, 2025
Malware in dir-tree-generator
1 compromised version
- Mar 28, 2025
Malicious code in teleport-ui (npm)
4 compromised versions
- Mar 28, 2025
Malicious code in ecko-wallet-react (npm)
- Mar 28, 2025
Malicious code in ecko-wallet (npm)
- Mar 28, 2025
Malicious code in degate_protocols (npm)
- Mar 28, 2025
Malicious code in degate.js (npm)
- Mar 28, 2025
Malicious code in degate (npm)
- Mar 28, 2025
Malware in degate
1 compromised version
- Mar 28, 2025
Malware in ecko-wallet-react
1 compromised version
- Mar 28, 2025
Malware in ecko-wallet
1 compromised version
- Mar 28, 2025
Malware in degate_protocols
1 compromised version
- Mar 28, 2025
Malware in teleport-ui
1 compromised version
- Mar 28, 2025
Malware in degate.js
1 compromised version
- Mar 28, 2025
Malware in cryptomus-aurora-kit
1 compromised version
- Mar 28, 2025
Malicious code in kaddex-ui (npm)
2 compromised versions
- Mar 28, 2025
Malicious code in ecko-dex-react (npm)
- Mar 28, 2025
Malware in ecko-dex-react
1 compromised version
- Mar 28, 2025
Malware in kaddex-ui
1 compromised version
- Mar 28, 2025
Malicious code in events-utils-lib (npm)
1 compromised version
- Mar 28, 2025
Malicious code in chai-validator (npm)
1 compromised version
- Mar 28, 2025
Malware in events-utils-lib
1 compromised version
- Mar 28, 2025
Malware in chai-validator
1 compromised version
- Mar 28, 2025
Malicious code in @takamol/react-qiwa-core (npm)
- Mar 28, 2025
Malicious code in @takamol/qiwa-remote-visuals (npm)
Page 5917 of 6,634