Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 18, 2025
Malware in com.github-glitchenzo.nugetforunity
1 compromised version
- Mar 18, 2025
Malware in opstooling-js-style
1 compromised version
- Mar 18, 2025
Malware in crypto-invoicer
1 compromised version
- Mar 18, 2025
Malware in symphony-data-map
1 compromised version
- Mar 18, 2025
Malware in sui-lending-protocol
1 compromised version
- Mar 18, 2025
Malware in auth0-ai-js
1 compromised version
- Mar 18, 2025
Malicious code in paymentapiplatformservice-paypal (npm)
4 compromised versions
- Mar 18, 2025
Malicious code in invoiceitem-paypal (npm)
2 compromised versions
- Mar 18, 2025
Malicious code in imagehostingserv-paypal (npm)
2 compromised versions
- Mar 18, 2025
Malicious code in compliancereadserv-paypal (npm)
2 compromised versions
- Mar 18, 2025
Malware in imagehostingserv-paypal
1 compromised version
- Mar 18, 2025
Malware in adminauthserv-paypal
1 compromised version
- Mar 18, 2025
Malware in tommyboytesting
1 compromised version
- Mar 18, 2025
Malware in paymentapiplatformservice-paypal
1 compromised version
- Mar 18, 2025
Malware in invoiceread-paypal
1 compromised version
- Mar 18, 2025
Malware in userrelationship-paypal
1 compromised version
- Mar 18, 2025
Malware in invoiceitem-paypal
1 compromised version
- Mar 18, 2025
Malware in paymentlookup-paypal
1 compromised version
- Mar 18, 2025
Malware in paymentread-paypal
1 compromised version
- Mar 18, 2025
Malware in compliancereadserv-paypal
1 compromised version
- Mar 18, 2025
Malware in bankingbundleserv
1 compromised version
- Mar 18, 2025
Malware in userbridge-paypal
1 compromised version
- Mar 18, 2025
Malicious code in @accesshsc/access-forms-engine (npm)
2 compromised versions
- Mar 18, 2025
Malware in @accesshsc/access-forms-engine
1 compromised version
- Mar 18, 2025
Malicious code in ppcardmanagementv2serv (npm)
1 compromised version
- Mar 18, 2025
Malicious code in militaty-geza-blessed2025hondo (npm)
1 compromised version
- Mar 18, 2025
Malicious code in sendmoneyserv (npm)
1 compromised version
- Mar 18, 2025
Malicious code in idt-validation-paypal (npm)
1 compromised version
- Mar 18, 2025
Malicious code in paypalmeserv (npm)
1 compromised version
- Mar 17, 2025
Malicious code in com.unity.testtools.codecoverage (npm)
1 compromised version
- Mar 17, 2025
Malicious code in real-world1 (npm)
1 compromised version
- Mar 17, 2025
Malicious code in @flutterfire/source-ui-widgets (npm)
1 compromised version
- Mar 17, 2025
Malicious code in zhdex (npm)
- Mar 17, 2025
Malware in zhdex
1 compromised version
- Mar 17, 2025
Malicious code in you-test-vue7 (npm)
- Mar 17, 2025
Malicious code in you-test-vue6 (npm)
- Mar 17, 2025
Malicious code in you-test-vue5 (npm)
- Mar 17, 2025
Malicious code in you-test-test-vue (npm)
- Mar 17, 2025
Malware in you-test-vue6
1 compromised version
- Mar 17, 2025
Malware in you-test-vue5
1 compromised version
- Mar 17, 2025
Malware in you-test-test-vue
1 compromised version
- Mar 17, 2025
Malware in you-test-vue7
1 compromised version
- Mar 17, 2025
Malware in sip.js-v2
1 compromised version
- Mar 17, 2025
Malware in ringcentral-web-phone-v2
1 compromised version
- Mar 17, 2025
Malware in pixelary
1 compromised version
- Mar 17, 2025
Malicious code in pdftodoc (npm)
- Mar 17, 2025
Malware in pdftodoc
1 compromised version
- Mar 17, 2025
Malware in nanovest-portal
1 compromised version
- Mar 17, 2025
Malware in agora-rtc-web
1 compromised version
- Mar 17, 2025
Malicious code in malwaretesting2 (npm)
Page 5928 of 6,634