Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 24, 2025
Malware in epic-react-store
1 compromised version
- Mar 24, 2025
Malware in icons-material
1 compromised version
- Mar 24, 2025
Malware in architecture-viewer
1 compromised version
- Mar 24, 2025
Malicious code in solana-headless-sdk (npm)
- Mar 24, 2025
Malicious code in @mctursh/ui-builder (npm)
- Mar 24, 2025
Malicious code in @agateh/solana-headless-core (npm)
- Mar 24, 2025
Malicious code in @agateh/solana-headless-adapter-base (npm)
- Mar 24, 2025
Malware in @mctursh/ui-builder
1 compromised version
- Mar 24, 2025
Malware in @agateh/solana-headless-core
1 compromised version
- Mar 24, 2025
Malware in @agateh/solana-headless-adapter-base
1 compromised version
- Mar 24, 2025
Malware in solana-headless-sdk
1 compromised version
- Mar 24, 2025
Malicious code in brixcrypto (npm)
- Mar 24, 2025
Malware in brixcrypto
1 compromised version
- Mar 23, 2025
Malicious code in ccfk (npm)
1 compromised version
- Mar 23, 2025
Malicious code in gh-find-current-pr (npm)
2 compromised versions
- Mar 23, 2025
Malicious code in tec-registry (npm)
1 compromised version
- Mar 22, 2025
Malicious code in lwc-recipes (npm)
1 compromised version
- Mar 21, 2025
Malicious code in tree-sitter-erlang (npm)
1 compromised version
- Mar 21, 2025
Malicious code in architecture-viewer (npm)
2 compromised versions
- Mar 21, 2025
Malware in @brix-crypto/crypto-js
1 compromised version
- Mar 21, 2025
Malicious code in vulnerable-dependency (npm)
1 compromised version
- Mar 20, 2025
Malicious code in my-signature (npm)
2 compromised versions
- Mar 20, 2025
Malicious code in byted-midas-render-plugin (npm)
1 compromised version
- Mar 20, 2025
Malicious code in com.unity.performance.profile-analyzer (npm)
1 compromised version
- Mar 20, 2025
Malicious code in keypair-encryption (npm)
- Mar 20, 2025
Malware in keypair-encryption
1 compromised version
- Mar 20, 2025
Malicious code in chatbot-dashboard (npm)
1 compromised version
- Mar 20, 2025
Malicious code in n11-web-client (npm)
1 compromised version
- Mar 20, 2025
Malicious code in n11-chatbot (npm)
1 compromised version
- Mar 20, 2025
Malicious code in vscode-typescript-next (npm)
- Mar 20, 2025
Malicious code in typespec-java (npm)
- Mar 20, 2025
Malicious code in thiserror (npm)
- Mar 20, 2025
Malicious code in template-schema-validation-tools (npm)
- Mar 20, 2025
Malicious code in my-local-c (npm)
- Mar 20, 2025
Malicious code in my-local-b-off (npm)
- Mar 20, 2025
Malicious code in code-tours-github (npm)
3 compromised versions
- Mar 20, 2025
Malicious code in cargo_metadata (npm)
- Mar 20, 2025
Malicious code in cargo-cyclonedx (npm)
3 compromised versions
- Mar 20, 2025
Malicious code in azqr (npm)
- Mar 20, 2025
Malware in vscode-typescript-next
1 compromised version
- Mar 20, 2025
Malware in azqr
1 compromised version
- Mar 20, 2025
Malware in typespec-java
1 compromised version
- Mar 20, 2025
Malware in thiserror
1 compromised version
- Mar 20, 2025
Malware in template-schema-validation-tools
1 compromised version
- Mar 20, 2025
Malware in k8s-deploy-action
1 compromised version
- Mar 20, 2025
Malware in azure-rest-api-specs
1 compromised version
- Mar 20, 2025
Malware in assert_cmd
1 compromised version
- Mar 20, 2025
Malware in cargo_metadata
1 compromised version
- Mar 20, 2025
Malware in my-local-c
1 compromised version
- Mar 20, 2025
Malware in my-local-b-off
1 compromised version
Page 5924 of 6,634