Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 17, 2025
Malware in malwaretesting1
1 compromised version
- Mar 17, 2025
Malware in malwaretest
1 compromised version
- Mar 17, 2025
Malware in malwaretesting2
1 compromised version
- Mar 17, 2025
Malicious code in shorterapp (npm)
- Mar 17, 2025
Malicious code in homeappserver (npm)
- Mar 17, 2025
Malicious code in eslint8_flat_config_mjs (npm)
- Mar 17, 2025
Malicious code in datamations (npm)
- Mar 17, 2025
Malicious code in attacktree (npm)
- Mar 17, 2025
Malware in pages14.0.0_i18n
1 compromised version
- Mar 17, 2025
Malware in datamations
1 compromised version
- Mar 17, 2025
Malware in homeappserver
1 compromised version
- Mar 17, 2025
Malware in attacktree
1 compromised version
- Mar 17, 2025
Malware in shorterapp
1 compromised version
- Mar 17, 2025
Malware in eslint7_0
1 compromised version
- Mar 17, 2025
Malware in eslint8_flat_config_mjs
1 compromised version
- Mar 17, 2025
Malware in qaboard
1 compromised version
- Mar 17, 2025
Malware in subnplanmgmtserv
1 compromised version
- Mar 17, 2025
Malicious code in ramp-tax-info-ui (npm)
1 compromised version
- Mar 17, 2025
Malicious code in coral-typescript-types-pieces (npm)
1 compromised version
- Mar 17, 2025
Malware in subscriptionmgmtserv
1 compromised version
- Mar 17, 2025
Malware in orchestration-types
1 compromised version
- Mar 17, 2025
Malware in buttonfactoryserv-paypal
1 compromised version
- Mar 17, 2025
Malware in snap-design-system-icons
1 compromised version
- Mar 17, 2025
Malware in aws-features-signin-proxy-client
1 compromised version
- Mar 17, 2025
Malware in configs-web-react
1 compromised version
- Mar 17, 2025
Malware in coral-typescript-types-pieces
1 compromised version
- Mar 17, 2025
Malware in ramp-tax-info-ui
1 compromised version
- Mar 17, 2025
Malicious code in career-craft (npm)
1 compromised version
- Mar 17, 2025
Malware in career-craft
1 compromised version
- Mar 17, 2025
Malicious code in probe.gl-monorepo (npm)
1 compromised version
- Mar 17, 2025
Malware in ocular-monorepo
1 compromised version
- Mar 17, 2025
Malware in probe.gl-monorepo
1 compromised version
- Mar 17, 2025
Malicious code in usedin1calculatedmember.js (npm)
1 compromised version
- Mar 17, 2025
Malicious code in usedin1calculatedmember (npm)
3 compromised versions
- Mar 17, 2025
Malicious code in calculated_members_message.js (npm)
5 compromised versions
- Mar 17, 2025
Malware in calculated_members_message.js
1 compromised version
- Mar 17, 2025
Malware in usedin1calculatedmember
1 compromised version
- Mar 17, 2025
Malware in calculated_members_message
1 compromised version
- Mar 17, 2025
Malware in usedin1calculatedmember.js
1 compromised version
- Mar 17, 2025
Malicious code in node-llama-cpp-project (npm)
- Mar 17, 2025
Malicious code in ear-gui-portal (npm)
- Mar 17, 2025
Malicious code in antilles-portal (npm)
- Mar 17, 2025
Malware in node-llama-cpp-project
1 compromised version
- Mar 17, 2025
Malware in ear-gui-portal
1 compromised version
- Mar 17, 2025
Malware in antilles-portal
1 compromised version
- Mar 17, 2025
Malicious code in skinport-plus (npm)
- Mar 17, 2025
Malicious code in panmirror (npm)
- Mar 17, 2025
Malicious code in luigi-core-private (npm)
- Mar 17, 2025
Malicious code in dexter-monitor (npm)
- Mar 17, 2025
Malicious code in contaxy-webapp (npm)
Page 5929 of 6,634