Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 14, 2025
Malware in digits-common
1 compromised version
- Mar 14, 2025
Malware in request-draft-ui
1 compromised version
- Mar 14, 2025
Malicious code in workfront-tailwind-base (npm)
3 compromised versions
- Mar 14, 2025
Malicious code in trafficking (npm)
2 compromised versions
- Mar 14, 2025
Malicious code in kamino-modules (npm)
2 compromised versions
- Mar 14, 2025
Malicious code in hoist-non-react (npm)
2 compromised versions
- Mar 14, 2025
Malware in workfront-tailwind-base
1 compromised version
- Mar 14, 2025
Malware in hoist-non-react
1 compromised version
- Mar 14, 2025
Malware in kamino-modules
1 compromised version
- Mar 14, 2025
Malware in trafficking
1 compromised version
- Mar 14, 2025
Malicious code in workfront-twind (npm)
10 compromised versions
- Mar 14, 2025
Malware in workfront-twind
1 compromised version
- Mar 14, 2025
Malware in single-spa-workfront
1 compromised version
- Mar 14, 2025
Malicious code in visitor-targeting (npm)
3 compromised versions
- Mar 14, 2025
Malicious code in @od-react/od-react-test (npm)
3 compromised versions
- Mar 14, 2025
Malware in @od-react/od-react-test
1 compromised version
- Mar 14, 2025
Malware in visitor-targeting
1 compromised version
- Mar 14, 2025
Malicious code in small-ct (npm)
1 compromised version
- Mar 14, 2025
Malware in small-ct
1 compromised version
- Mar 14, 2025
Malicious code in secureshield1 (npm)
1 compromised version
- Mar 14, 2025
Malware in secureshield1
1 compromised version
- Mar 14, 2025
Malicious code in xeno-client (npm)
5 compromised versions
- Mar 14, 2025
Malicious code in scriptconfig (npm)
7 compromised versions
- Mar 14, 2025
Malware in scriptconfig
1 compromised version
- Mar 14, 2025
Malware in xeno-client
1 compromised version
- Mar 14, 2025
Malicious code in postprocesstree-addon (npm)
2 compromised versions
- Mar 14, 2025
Malicious code in plz-bas-ek-bar-dilado-batman (npm)
- Mar 14, 2025
Malware in plz-bas-ek-bar-dilado-batman
1 compromised version
- Mar 14, 2025
Malware in postprocesstree-addon
1 compromised version
- Mar 14, 2025
Malware in hybrid-frontend
1 compromised version
- Mar 14, 2025
Malware in bsee-shared-hmd
1 compromised version
- Mar 14, 2025
Malicious code in needlecast_prodeng_bfg_ui_consumerclient (npm)
- Mar 14, 2025
Malware in bahamazing
1 compromised version
- Mar 14, 2025
Malware in needlecast_prodeng_bfg_ui_consumerclient
1 compromised version
- Mar 14, 2025
Malicious code in eslint-plugin-highcharts (npm)
1 compromised version
- Mar 14, 2025
Malware in eslint-plugin-highcharts
1 compromised version
- Mar 14, 2025
Malicious code in dependencyconfusion9 (npm)
1 compromised version
- Mar 14, 2025
Malware in dependencyconfusion9
1 compromised version
- Mar 14, 2025
Malicious code in twilio-live-interactive-video (npm)
1 compromised version
- Mar 14, 2025
Malicious code in elementor-hello-theme (npm)
1 compromised version
- Mar 14, 2025
Malicious code in dvd-ai-pc-rag (npm)
1 compromised version
- Mar 14, 2025
Malicious code in bbc-grandstand (npm)
1 compromised version
- Mar 14, 2025
Malicious code in aiven-docs (npm)
1 compromised version
- Mar 14, 2025
Malware in aiven-docs
1 compromised version
- Mar 14, 2025
Malware in twilio-live-interactive-video
1 compromised version
- Mar 14, 2025
Malware in skyflowelements
1 compromised version
- Mar 14, 2025
Malware in com.google.xr.windowmirror
1 compromised version
- Mar 14, 2025
Malware in bbc-grandstand
1 compromised version
- Mar 14, 2025
Malware in okta-sdk-php-openapi
1 compromised version
- Mar 14, 2025
Malware in pinterest-api-quickstart
1 compromised version
Page 5933 of 6,634