Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 17, 2025
Malware in contaxy-webapp
1 compromised version
- Mar 17, 2025
Malware in aem-maven-archetype
1 compromised version
- Mar 17, 2025
Malware in unms-server
1 compromised version
- Mar 17, 2025
Malware in dexter-server
1 compromised version
- Mar 17, 2025
Malware in luigi-core-private
1 compromised version
- Mar 17, 2025
Malware in dexter-monitor
1 compromised version
- Mar 17, 2025
Malware in react-fixtures
1 compromised version
- Mar 17, 2025
Malware in azure-boards-estimate
1 compromised version
- Mar 17, 2025
Malware in skinport-plus
1 compromised version
- Mar 17, 2025
Malware in product-custom-grid-columns
1 compromised version
- Mar 17, 2025
Malware in panmirror
1 compromised version
- Mar 17, 2025
Malware in ark-boostrap
1 compromised version
- Mar 17, 2025
Malicious code in snap-design-system-marketing (npm)
3 compromised versions
- Mar 17, 2025
Malicious code in digitabell (npm)
1 compromised version
- Mar 17, 2025
Malware in ad-creative-preview
1 compromised version
- Mar 17, 2025
Malware in digitabell
1 compromised version
- Mar 17, 2025
Malware in snap-design-system-marketing
1 compromised version
- Mar 17, 2025
Malware in fullscreenify
1 compromised version
- Mar 17, 2025
Malware in @sonahri51/orientation-change-end
1 compromised version
- Mar 17, 2025
Malicious code in @financials/using-dep-conf (npm)
- Mar 17, 2025
Malicious code in @financials/ui-components (npm)
- Mar 17, 2025
Malware in @financials/ui-components
1 compromised version
- Mar 17, 2025
Malware in @financials/using-dep-conf
1 compromised version
- Mar 16, 2025
Malicious code in assert_cmd (npm)
1 compromised version
- Mar 16, 2025
Malicious code in ionicaiosampleapp (npm)
1 compromised version
- Mar 16, 2025
Malicious code in devpod (npm)
1 compromised version
- Mar 15, 2025
Malicious code in whatsapp-sdk-docs (npm)
1 compromised version
- Mar 15, 2025
Malicious code in starrocks (npm)
1 compromised version
- Mar 15, 2025
Malicious code in specialist-pwm (npm)
1 compromised version
- Mar 14, 2025
Malicious code in spot-the-station-app (npm)
1 compromised version
- Mar 14, 2025
Malicious code in k8s-deploy-action (npm)
2 compromised versions
- Mar 14, 2025
Malicious code in cryptomus-aurora-kit (npm)
3 compromised versions
- Mar 14, 2025
Malicious code in oasis-os-common (npm)
1 compromised version
- Mar 14, 2025
Malicious code in swing-log (npm)
- Mar 14, 2025
Malware in swing-log
1 compromised version
- Mar 14, 2025
Malicious code in node-key-lister (npm)
- Mar 14, 2025
Malicious code in key-lister (npm)
- Mar 14, 2025
Malware in node-key-lister
1 compromised version
- Mar 14, 2025
Malware in key-lister
1 compromised version
- Mar 14, 2025
Malicious code in snore-log (npm)
- Mar 14, 2025
Malicious code in resolve-configuration (npm)
- Mar 14, 2025
Malicious code in dev-debugger-vite (npm)
- Mar 14, 2025
Malicious code in core-pino (npm)
- Mar 14, 2025
Malware in resolve-configuration
1 compromised version
- Mar 14, 2025
Malware in dev-debugger-vite
1 compromised version
- Mar 14, 2025
Malware in snore-log
1 compromised version
- Mar 14, 2025
Malware in core-pino
1 compromised version
- Mar 14, 2025
Malicious code in transaction-generator (npm)
- Mar 14, 2025
Malware in transaction-generator
1 compromised version
- Mar 14, 2025
Malicious code in vue-plugin-rely2 (npm)
Page 5930 of 6,634