Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 14, 2025
Malware in elementor-hello-theme
1 compromised version
- Mar 14, 2025
Malware in dvd-ai-pc-rag
1 compromised version
- Mar 14, 2025
Malicious code in adl-commons-lib-node-pp-parameter-store (npm)
1 compromised version
- Mar 14, 2025
Malware in adl-commons-lib-node-pp-parameter-store
1 compromised version
- Mar 14, 2025
Malicious code in nicegirl (npm)
- Mar 14, 2025
Malicious code in bigmoneymaker (npm)
- Mar 14, 2025
Malicious code in bigdopebro (npm)
- Mar 14, 2025
Malicious code in @sheingroup/niceshot (npm)
- Mar 14, 2025
Malicious code in @sheingroup/loveshiro (npm)
- Mar 14, 2025
Malicious code in @sheingroup/justakiss (npm)
- Mar 14, 2025
Malicious code in @sheingroup/babetonight (npm)
- Mar 14, 2025
Malware in @sheingroup/loveshiro
1 compromised version
- Mar 14, 2025
Malware in nicegirl
1 compromised version
- Mar 14, 2025
Malware in @sheingroup/justakiss
1 compromised version
- Mar 14, 2025
Malware in @sheingroup/babetonight
1 compromised version
- Mar 14, 2025
Malware in bigdopebro
1 compromised version
- Mar 14, 2025
Malware in @sheingroup/niceshot
1 compromised version
- Mar 14, 2025
Malware in bigmoneymaker
1 compromised version
- Mar 14, 2025
Malicious code in superdope (npm)
- Mar 14, 2025
Malicious code in cashbabe (npm)
- Mar 14, 2025
Malware in superdope
1 compromised version
- Mar 14, 2025
Malware in cashbabe
1 compromised version
- Mar 13, 2025
Malicious code in mocha-dast-reporter (npm)
1 compromised version
- Mar 13, 2025
Malicious code in messaging-components (npm)
1 compromised version
- Mar 13, 2025
Malicious code in foundry-js-react-blueprint (npm)
1 compromised version
- Mar 13, 2025
Malicious code in paymentread-paypal (npm)
1 compromised version
- Mar 13, 2025
Malicious code in paymentlookup-paypal (npm)
1 compromised version
- Mar 13, 2025
Malicious code in invoiceread-paypal (npm)
1 compromised version
- Mar 13, 2025
Malicious code in @contraktor-tech/poc_confusion (npm)
1 compromised version
- Mar 13, 2025
Malicious code in notification-center-admin (npm)
1 compromised version
- Mar 12, 2025
Malicious code in auth-validator (npm)
- Mar 12, 2025
Malware in auth-validator
1 compromised version
- Mar 12, 2025
Malicious code in react-event-dependency (npm)
2 compromised versions
- Mar 12, 2025
Malware in react-event-dependency
1 compromised version
- Mar 12, 2025
Malicious code in empty-validator (npm)
- Mar 12, 2025
Malicious code in empty-array-validator (npm)
- Mar 12, 2025
Malicious code in array-empty-validator (npm)
- Mar 12, 2025
Malware in empty-validator
1 compromised version
- Mar 12, 2025
Malware in empty-array-validator
1 compromised version
- Mar 12, 2025
Malware in array-empty-validator
1 compromised version
- Mar 12, 2025
Malicious code in event-handle-package (npm)
- Mar 12, 2025
Malicious code in event-handle (npm)
- Mar 12, 2025
Malware in event-handle-package
1 compromised version
- Mar 12, 2025
Malware in event-handle
1 compromised version
- Mar 12, 2025
Malicious code in yoojae-validator (npm)
- Mar 12, 2025
Malicious code in icloud-xod (npm)
- Mar 12, 2025
Malware in icloud-xod
1 compromised version
- Mar 12, 2025
Malware in yoojae-validator
1 compromised version
- Mar 12, 2025
Malicious code in is-buffer-validator (npm)
- Mar 12, 2025
Malicious code in events-utils (npm)
Page 5934 of 6,634