Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 25, 2025
Malware in @sensort/common
1 compromised version
- Mar 25, 2025
Malware in @sensort/session
1 compromised version
- Mar 25, 2025
Malware in create-sensort-app
1 compromised version
- Mar 25, 2025
Malware in @sensort/mongoose
1 compromised version
- Mar 25, 2025
Malware in sensort
1 compromised version
- Mar 25, 2025
Malware in @sensort/core
1 compromised version
- Mar 25, 2025
Malware in @sensort/cron
1 compromised version
- Mar 25, 2025
Malware in sensort-cli
1 compromised version
- Mar 25, 2025
Malware in @sensort/router
1 compromised version
- Mar 25, 2025
Malware in @sensort/mongoose-migrations
1 compromised version
- Mar 25, 2025
Malicious code in @ptc-ibm/greetings (npm)
- Mar 25, 2025
Malware in @ptc-ibm/greetings
1 compromised version
- Mar 25, 2025
Malicious code in @ibm-ptc/greetings (npm)
- Mar 25, 2025
Malware in @ibm-ptc/greetings
1 compromised version
- Mar 25, 2025
Malicious code in elm-lang-core (npm)
- Mar 25, 2025
Malware in elm-lang-core
1 compromised version
- Mar 25, 2025
Malicious code in ofjaaah-dependency-confusion (npm)
1 compromised version
- Mar 25, 2025
Malicious code in justinmimbs-elm-date-extra (npm)
- Mar 25, 2025
Malicious code in elm-lang-http (npm)
- Mar 25, 2025
Malicious code in @ofjaaah/jose2 (npm)
1 compromised version
- Mar 25, 2025
Malware in @ofjaaah/jose2
1 compromised version
- Mar 25, 2025
Malware in elm-lang-http
1 compromised version
- Mar 25, 2025
Malware in ofjaaah-dependency-confusion
1 compromised version
- Mar 25, 2025
Malware in justinmimbs-elm-date-extra
1 compromised version
- Mar 25, 2025
Malicious code in @mint-lib/routing-context (npm)
1 compromised version
- Mar 25, 2025
Malicious code in @mint-lib/query-client (npm)
1 compromised version
- Mar 25, 2025
Malicious code in @mint-lib/notifications (npm)
1 compromised version
- Mar 25, 2025
Malware in @mint-lib/notifications
1 compromised version
- Mar 25, 2025
Malware in @mint-lib/routing-context
1 compromised version
- Mar 25, 2025
Malware in @mint-lib/query-client
1 compromised version
- Mar 25, 2025
Malicious code in xablaublaubleu (npm)
1 compromised version
- Mar 25, 2025
Malware in xablaublaubleu
1 compromised version
- Mar 25, 2025
Malware in testsdvsdfsdf
1 compromised version
- Mar 25, 2025
Malicious code in internallib_v341 (npm)
2 compromised versions
- Mar 25, 2025
Malware in internallib_v341
1 compromised version
- Mar 25, 2025
Malicious code in font-basic (npm)
- Mar 25, 2025
Malware in font-basic
1 compromised version
- Mar 25, 2025
Malware in sendbird-chat-sample-react
1 compromised version
- Mar 25, 2025
Malicious code in solidity-ibc-eureka (npm)
1 compromised version
- Mar 25, 2025
Malicious code in shahg-gaminh (npm)
1 compromised version
- Mar 25, 2025
Malicious code in nodejs-website (npm)
1 compromised version
- Mar 25, 2025
Malicious code in diacritic_remover (npm)
1 compromised version
- Mar 25, 2025
Malware in diacritic_remover
1 compromised version
- Mar 25, 2025
Malware in shahg-gaminh
1 compromised version
- Mar 25, 2025
Malware in rif-lumino
1 compromised version
- Mar 25, 2025
Malware in solidity-ibc-eureka
1 compromised version
- Mar 25, 2025
Malware in dev-journey-app
1 compromised version
- Mar 25, 2025
Malware in nodejs-website
1 compromised version
- Mar 25, 2025
Malware in next-tab
1 compromised version
- Mar 25, 2025
Malware in testnet-contracts
1 compromised version
Page 5921 of 6,634