Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 12, 2025
Malware in events-utils
1 compromised version
- Mar 12, 2025
Malware in is-buffer-validator
1 compromised version
- Mar 12, 2025
Malicious code in cfa-react-components (npm)
1 compromised version
- Mar 12, 2025
Malicious code in malwaretesting1 (npm)
1 compromised version
- Mar 12, 2025
Malicious code in malwaretesting (npm)
2 compromised versions
- Mar 12, 2025
Malicious code in malwaretest (npm)
5 compromised versions
- Mar 12, 2025
Malicious code in hybrid-frontend (npm)
1 compromised version
- Mar 12, 2025
Malicious code in bsee-shared-hmd (npm)
3 compromised versions
- Mar 12, 2025
Malicious code in actions-project-version-check (npm)
1 compromised version
- Mar 12, 2025
Malicious code in mern-ecom (npm)
- Mar 12, 2025
Malware in mern-ecom
1 compromised version
- Mar 12, 2025
Malicious code in mern-launcher (npm)
- Mar 12, 2025
Malware in mern-launcher
1 compromised version
- Mar 12, 2025
Malicious code in zaggletech (npm)
1 compromised version
- Mar 12, 2025
Malware in zaggletech
1 compromised version
- Mar 12, 2025
Malicious code in support-lib (npm)
11 compromised versions
- Mar 12, 2025
Malicious code in profile-ts (npm)
4 compromised versions
- Mar 12, 2025
Malicious code in company-ts (npm)
5 compromised versions
- Mar 12, 2025
Malware in support-lib
1 compromised version
- Mar 12, 2025
Malware in profile-ts
1 compromised version
- Mar 12, 2025
Malware in company-ts
1 compromised version
- Mar 12, 2025
Malicious code in sniper-hashing (npm)
- Mar 12, 2025
Malware in sniper-hashing
1 compromised version
- Mar 12, 2025
Malicious code in rolldownload (npm)
1 compromised version
- Mar 12, 2025
Malicious code in rc-tab-sdk (npm)
- Mar 12, 2025
Malware in rolldownload
1 compromised version
- Mar 12, 2025
Malware in rc-tab-sdk
1 compromised version
- Mar 12, 2025
Malicious code in stdo-env (npm)
2 compromised versions
- Mar 12, 2025
Malicious code in shein-uesragent-detection (npm)
1 compromised version
- Mar 12, 2025
Malicious code in shein-feedbcak (npm)
1 compromised version
- Mar 12, 2025
Malicious code in rc-upload-sdk (npm)
3 compromised versions
- Mar 12, 2025
Malicious code in npm-testlist (npm)
- Mar 12, 2025
Malicious code in googlepeay (npm)
- Mar 12, 2025
Malicious code in freezelists (npm)
2 compromised versions
- Mar 12, 2025
Malicious code in client-analytisc-sdk (npm)
- Mar 12, 2025
Malware in client-analytisc-sdk
1 compromised version
- Mar 12, 2025
Malware in freezelists
1 compromised version
- Mar 12, 2025
Malware in rc-upload-sdk
1 compromised version
- Mar 12, 2025
Malware in shein-uesragent-detection
1 compromised version
- Mar 12, 2025
Malware in npm-testlist
1 compromised version
- Mar 12, 2025
Malware in stdo-env
1 compromised version
- Mar 12, 2025
Malware in googlepeay
1 compromised version
- Mar 12, 2025
Malware in shein-feedbcak
1 compromised version
- Mar 12, 2025
Malicious code in codebarrel (npm)
6 compromised versions
- Mar 12, 2025
Malicious code in angular-remove-diacritics (npm)
9 compromised versions
- Mar 12, 2025
Malware in codebarrel
1 compromised version
- Mar 12, 2025
Malware in angular-remove-diacritics
1 compromised version
- Mar 12, 2025
Malicious code in stringify-bytes32 (npm)
2 compromised versions
- Mar 12, 2025
Malware in stringify-bytes32
1 compromised version
- Mar 12, 2025
Malicious code in ward-steward (npm)
1 compromised version
Page 5935 of 6,634