Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 12, 2025
Malicious code in spectrocoin (npm)
1 compromised version
- Mar 12, 2025
Malicious code in ledger-node-example (npm)
- Mar 12, 2025
Malicious code in easeus.com (npm)
1 compromised version
- Mar 12, 2025
Malicious code in cryptocom-ai-agent-service (npm)
1 compromised version
- Mar 12, 2025
Malicious code in core-registry-config (npm)
- Mar 12, 2025
Malicious code in code-snippet-editor-plugin (npm)
- Mar 12, 2025
Malicious code in chialisp-lsp-test (npm)
- Mar 12, 2025
Malware in easeus.com
1 compromised version
- Mar 12, 2025
Malware in spectrocoin
1 compromised version
- Mar 12, 2025
Malware in code-snippet-editor-plugin
1 compromised version
- Mar 12, 2025
Malware in ledger-node-example
1 compromised version
- Mar 12, 2025
Malware in core-registry-config
1 compromised version
- Mar 12, 2025
Malware in chialisp-lsp-test
1 compromised version
- Mar 12, 2025
Malware in cryptocom-ai-agent-service
1 compromised version
- Mar 12, 2025
Malware in erc20-faucet
1 compromised version
- Mar 12, 2025
Malware in miniprogram-project
1 compromised version
- Mar 12, 2025
Malware in ward-steward
1 compromised version
- Mar 12, 2025
Malware in storyblok-rich-text-astro-renderer-workspace
1 compromised version
- Mar 12, 2025
Malicious code in language-ring (npm)
- Mar 12, 2025
Malicious code in hardhat-ethers-react-ts-starter (npm)
- Mar 12, 2025
Malicious code in expect-violations (npm)
- Mar 12, 2025
Malicious code in auth0-langgraph-state-rag-js (npm)
- Mar 12, 2025
Malware in hardhat-ethers-react-ts-starter
1 compromised version
- Mar 12, 2025
Malware in language-ring
1 compromised version
- Mar 12, 2025
Malware in expect-violations
1 compromised version
- Mar 12, 2025
Malware in auth0-langgraph-state-rag-js
1 compromised version
- Mar 12, 2025
Malicious code in across-package-prod (npm)
- Mar 12, 2025
Malware in across-package-prod
1 compromised version
- Mar 12, 2025
Malicious code in customer-identity-mfe (npm)
1 compromised version
- Mar 12, 2025
Malicious code in customer-identity-mfe-dev (npm)
1 compromised version
- Mar 11, 2025
Malicious code in env-check-helper (npm)
- Mar 11, 2025
Malicious code in code-comment-linter (npm)
- Mar 11, 2025
Malware in env-check-helper
1 compromised version
- Mar 11, 2025
Malware in code-comment-linter
1 compromised version
- Mar 11, 2025
Malicious code in upload-aliyun-oss (npm)
- Mar 11, 2025
Malicious code in simple-progress-cli (npm)
- Mar 11, 2025
Malicious code in prop2json (npm)
- Mar 11, 2025
Malicious code in json-schema-verify (npm)
- Mar 11, 2025
Malicious code in image-watermarks (npm)
- Mar 11, 2025
Malicious code in dt-helper (npm)
- Mar 11, 2025
Malicious code in dir-size-analyzer (npm)
- Mar 11, 2025
Malicious code in @shein-components-test-ump/text-to-speech-tool (npm)
- Mar 11, 2025
Malware in dt-helper
1 compromised version
- Mar 11, 2025
Malware in simple-progress-cli
1 compromised version
- Mar 11, 2025
Malware in image-watermarks
1 compromised version
- Mar 11, 2025
Malware in @shein-components-test-ump/text-to-speech-tool
1 compromised version
- Mar 11, 2025
Malware in upload-aliyun-oss
1 compromised version
- Mar 11, 2025
Malware in dir-size-analyzer
1 compromised version
- Mar 11, 2025
Malware in json-schema-verify
1 compromised version
- Mar 11, 2025
Malware in prop2json
1 compromised version
Page 5936 of 6,634