Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 25, 2025
Malware in realityspiral
1 compromised version
- Mar 25, 2025
Malware in files_texteditor
1 compromised version
- Mar 25, 2025
Malware in owncloud-customgroups-dev
1 compromised version
- Mar 25, 2025
Malware in external-adapters-js
1 compromised version
- Mar 25, 2025
Malware in user-switching
1 compromised version
- Mar 25, 2025
Malware in mono-faucet
1 compromised version
- Mar 25, 2025
Malware in pages-proxy
1 compromised version
- Mar 25, 2025
Malware in sahasuhdjdhajdhja
1 compromised version
- Mar 25, 2025
Malware in powpeg
1 compromised version
- Mar 25, 2025
Malware in k6-docs
1 compromised version
- Mar 25, 2025
Malware in wp-crontrol
1 compromised version
- Mar 25, 2025
Malware in guests
1 compromised version
- Mar 25, 2025
Malicious code in react-script-log (npm)
- Mar 25, 2025
Malware in react-script-log
1 compromised version
- Mar 25, 2025
Malicious code in pn-checkout (npm)
1 compromised version
- Mar 25, 2025
Malware in pn-checkout
1 compromised version
- Mar 25, 2025
Malicious code in ebtc-zap-router (npm)
1 compromised version
- Mar 25, 2025
Malicious code in discourse-web3auth-theme (npm)
1 compromised version
- Mar 25, 2025
Malicious code in certik-swc-registry (npm)
2 compromised versions
- Mar 25, 2025
Malicious code in bootstrap_dev_scratch (npm)
1 compromised version
- Mar 25, 2025
Malware in wrap.scrt.network
1 compromised version
- Mar 25, 2025
Malware in midle-contracts
1 compromised version
- Mar 25, 2025
Malware in dfx-api
1 compromised version
- Mar 25, 2025
Malware in bootstrap_dev_scratch
1 compromised version
- Mar 25, 2025
Malware in depx-contract
1 compromised version
- Mar 25, 2025
Malware in certik-swc-registry
1 compromised version
- Mar 25, 2025
Malware in discourse-web3auth-theme
1 compromised version
- Mar 25, 2025
Malware in ebtc-zap-router
1 compromised version
- Mar 25, 2025
Malware in @domons/test
1 compromised version
- Mar 25, 2025
Malicious code in vistar-ad-clienttestadv4 (npm)
1 compromised version
- Mar 25, 2025
Malicious code in vistar-ad-clienttestadv3 (npm)
1 compromised version
- Mar 25, 2025
Malicious code in vistar-ad-clienttestadv2 (npm)
1 compromised version
- Mar 25, 2025
Malware in vistar-ad-clienttestadv3
1 compromised version
- Mar 25, 2025
Malware in vistar-ad-clienttestadv2
1 compromised version
- Mar 25, 2025
Malware in vistar-ad-clienttestadv4
1 compromised version
- Mar 25, 2025
Malicious code in truchuhhbuh (npm)
- Mar 25, 2025
Malicious code in test-module-example (npm)
- Mar 25, 2025
Malware in test-module-example
1 compromised version
- Mar 25, 2025
Malware in truchuhhbuh
1 compromised version
- Mar 25, 2025
Malicious code in standard-demo (npm)
1 compromised version
- Mar 25, 2025
Malware in standard-demo
1 compromised version
- Mar 25, 2025
Malware in sdxcode1
1 compromised version
- Mar 25, 2025
Malware in migrate-npm-registry
1 compromised version
- Mar 25, 2025
Malware in nmp-frontend-libraries
1 compromised version
- Mar 25, 2025
Malicious code in maga-ai (npm)
- Mar 25, 2025
Malicious code in gaimes-fun (npm)
- Mar 25, 2025
Malware in gaimes-fun
1 compromised version
- Mar 25, 2025
Malware in maga-ai
1 compromised version
- Mar 25, 2025
Malicious code in kagi_browser_ext (npm)
1 compromised version
- Mar 25, 2025
Malware in hdhh.hiijack
1 compromised version
Page 5922 of 6,634