Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 28, 2025
Malicious code in @takamol/qiwa-library (npm)
- Mar 28, 2025
Malicious code in @takamol/qiwa-env-utils (npm)
- Mar 28, 2025
Malicious code in @takamol/qiwa-design-system (npm)
- Mar 28, 2025
Malicious code in @takamol/qiwa-api-client (npm)
- Mar 28, 2025
Malicious code in @takamol/ets-react-components (npm)
- Mar 28, 2025
Malware in @takamol/qiwa-remote-visuals
1 compromised version
- Mar 28, 2025
Malware in @takamol/qiwa-library
1 compromised version
- Mar 28, 2025
Malware in @takamol/react-qiwa-core
1 compromised version
- Mar 28, 2025
Malware in @takamol/qiwa-design-system
1 compromised version
- Mar 28, 2025
Malware in @takamol/ets-react-components
1 compromised version
- Mar 28, 2025
Malware in @takamol/qiwa-api-client
1 compromised version
- Mar 28, 2025
Malware in @takamol/qiwa-env-utils
1 compromised version
- Mar 28, 2025
Malicious code in @takamol/eslint-config (npm)
- Mar 28, 2025
Malware in @takamol/eslint-config
1 compromised version
- Mar 28, 2025
Malicious code in oasis-os-theming (npm)
1 compromised version
- Mar 28, 2025
Malware in dmpconnectjsapp-base
1 compromised version
- Mar 28, 2025
Malware in oasis-os-theming
1 compromised version
- Mar 28, 2025
Malware in oasis-os-common
1 compromised version
- Mar 28, 2025
Malware in notification-center-admin
1 compromised version
- Mar 28, 2025
Malicious code in osxlocation (npm)
- Mar 28, 2025
Malicious code in macos-relese (npm)
6 compromised versions
- Mar 28, 2025
Malicious code in macappstore (npm)
2 compromised versions
- Mar 28, 2025
Malware in macappstore
1 compromised version
- Mar 28, 2025
Malware in osxlocation
1 compromised version
- Mar 28, 2025
Malware in macos-relese
1 compromised version
- Mar 28, 2025
Malicious code in mathiconjsnz (npm)
4 compromised versions
- Mar 28, 2025
Malware in mathiconjsnz
1 compromised version
- Mar 28, 2025
Malicious code in @mukesh-d11/testing (npm)
- Mar 28, 2025
Malware in @mukesh-d11/testing
1 compromised version
- Mar 27, 2025
Malicious code in dmpconnectjsapp-base (npm)
1 compromised version
- Mar 27, 2025
Malicious code in @johndeere-tech/helios-mat-styles (npm)
1 compromised version
- Mar 27, 2025
Malicious code in @johndeere-tech/helios-styles (npm)
1 compromised version
- Mar 27, 2025
Malicious code in test-utils-bundle (npm)
1 compromised version
- Mar 27, 2025
Malicious code in crash-handler (npm)
1 compromised version
- Mar 27, 2025
Malware in test-utils-bundle
1 compromised version
- Mar 27, 2025
Malware in crash-handler
1 compromised version
- Mar 26, 2025
Malicious code in webhooks-contacts-app (npm)
2 compromised versions
- Mar 26, 2025
Malicious code in nylas-apex-sdk (npm)
1 compromised version
- Mar 26, 2025
Malicious code in ethers-provider2 (npm)
1 compromised version
- Mar 26, 2025
Malware in ethers-provider2
1 compromised version
- Mar 26, 2025
Malicious code in eslint-config-hectorm (npm)
14 compromised versions
- Mar 26, 2025
Malicious code in bagayaluzqdl159 (npm)
1 compromised version
- Mar 25, 2025
Malicious code in zqdllqdz15975321 (npm)
1 compromised version
- Mar 25, 2025
Malicious code in node-clog (npm)
- Mar 25, 2025
Malicious code in consolidate-logger (npm)
3 compromised versions
- Mar 25, 2025
Malicious code in consolidate-log (npm)
3 compromised versions
- Mar 25, 2025
Malicious code in cln-logger (npm)
- Mar 25, 2025
Malware in consolidate-log
1 compromised version
- Mar 25, 2025
Malware in cln-logger
1 compromised version
- Mar 25, 2025
Malware in consolidate-logger
1 compromised version
Page 5918 of 6,634