Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 20, 2025
Malware in code-tours-github
1 compromised version
- Mar 20, 2025
Malware in cargo-cyclonedx
1 compromised version
- Mar 20, 2025
Malicious code in glide-core (npm)
1 compromised version
- Mar 20, 2025
Malware in foundry-js-react-blueprint
1 compromised version
- Mar 20, 2025
Malware in messaging-components
1 compromised version
- Mar 20, 2025
Malware in glide-core
1 compromised version
- Mar 20, 2025
Malicious code in tfjs-backend-wasm (npm)
- Mar 20, 2025
Malicious code in paypal-product-picker (npm)
106 compromised versions
- Mar 20, 2025
Malicious code in airbnb-i18n (npm)
- Mar 20, 2025
Malicious code in airbnb-dev (npm)
- Mar 20, 2025
Malware in airbnb-dev
1 compromised version
- Mar 20, 2025
Malware in airbnb-o2
1 compromised version
- Mar 20, 2025
Malware in paypal-product-picker
1 compromised version
- Mar 20, 2025
Malware in tfjs-backend-wasm
1 compromised version
- Mar 20, 2025
Malware in airbnb-i18n
1 compromised version
- Mar 20, 2025
Malicious code in migu-utils (npm)
- Mar 20, 2025
Malicious code in migu-lib (npm)
14 compromised versions
- Mar 20, 2025
Malicious code in cmft-utils (npm)
6 compromised versions
- Mar 20, 2025
Malware in migu-lib
1 compromised version
- Mar 20, 2025
Malware in migu-utils
1 compromised version
- Mar 20, 2025
Malware in cmft-utils
1 compromised version
- Mar 20, 2025
Malicious code in momo-lib (npm)
1 compromised version
- Mar 20, 2025
Malware in momo-lib
1 compromised version
- Mar 20, 2025
Malicious code in arnotest (npm)
1 compromised version
- Mar 20, 2025
Malicious code in azure-rest-api-specs (npm)
1 compromised version
- Mar 19, 2025
Malicious code in tag-soup-ng (npm)
3 compromised versions
- Mar 19, 2025
Malicious code in yellowcard-styling-config (npm)
2 compromised versions
- Mar 19, 2025
Malicious code in symphony-duplicates (npm)
1 compromised version
- Mar 19, 2025
Malware in stripe-terminal-react-native
1 compromised version
- Mar 19, 2025
Malicious code in pb-node-modules (npm)
3 compromised versions
- Mar 19, 2025
Malware in pb-node-modules
1 compromised version
- Mar 19, 2025
Malicious code in sign-tx (npm)
- Mar 19, 2025
Malicious code in shanye-ethereumjs-utill (npm)
- Mar 19, 2025
Malicious code in ethereum-cryptoshanye (npm)
- Mar 19, 2025
Malicious code in ethereum-cryptog (npm)
- Mar 19, 2025
Malicious code in @shanye3501/curvess (npm)
- Mar 19, 2025
Malware in ethereum-cryptoshanye
1 compromised version
- Mar 19, 2025
Malware in @shanye3501/curvess
1 compromised version
- Mar 19, 2025
Malware in sign-tx
1 compromised version
- Mar 19, 2025
Malware in shanye-ethereumjs-utill
1 compromised version
- Mar 19, 2025
Malware in ethereum-cryptog
1 compromised version
- Mar 19, 2025
Malware in arkoselabs
1 compromised version
- Mar 19, 2025
Malware in devpod
1 compromised version
- Mar 19, 2025
Malware in ionicaiosampleapp
1 compromised version
- Mar 19, 2025
Malware in antlir2-docs
1 compromised version
- Mar 19, 2025
Malicious code in nnc-editor (npm)
1 compromised version
- Mar 19, 2025
Malicious code in exampleeeeeeeeeeeeeeeeeeee (npm)
- Mar 19, 2025
Malware in exampleeeeeeeeeeeeeeeeeeee
1 compromised version
- Mar 19, 2025
Malware in nnc-editor
1 compromised version
- Mar 19, 2025
Malware in starrocks
1 compromised version
Page 5925 of 6,634