Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 11, 2025
Malicious code in data-ext-extra (npm)
- Mar 11, 2025
Malware in data-ext-extra
1 compromised version
- Mar 11, 2025
Malicious code in better_dotenv (npm)
2 compromised versions
- Mar 11, 2025
Malware in better_dotenv
1 compromised version
- Mar 11, 2025
Malicious code in nodes-tree-visualizer-server (npm)
1 compromised version
- Mar 11, 2025
Malicious code in bg-todomvc (npm)
1 compromised version
- Mar 11, 2025
Malware in nodes-tree-visualizer-server
1 compromised version
- Mar 11, 2025
Malware in bg-todomvc
1 compromised version
- Mar 11, 2025
Malware in wasm-test-adapter
1 compromised version
- Mar 11, 2025
Malware in champion-trader
1 compromised version
- Mar 11, 2025
Malicious code in gh-node-module-generatebom (npm)
1 compromised version
- Mar 11, 2025
Malicious code in atm-event-app (npm)
1 compromised version
- Mar 11, 2025
Malware in gh-node-module-generatebom
1 compromised version
- Mar 11, 2025
Malware in atm-event-app
1 compromised version
- Mar 11, 2025
Malicious code in retool-quickopen-extension (npm)
1 compromised version
- Mar 11, 2025
Malicious code in bastion-react-app (npm)
2 compromised versions
- Mar 11, 2025
Malware in retool-quickopen-extension
1 compromised version
- Mar 11, 2025
Malware in bastion-react-app
1 compromised version
- Mar 11, 2025
Malicious code in www-discoveryeducation-com (npm)
- Mar 11, 2025
Malware in www-discoveryeducation-com
1 compromised version
- Mar 11, 2025
Malicious code in valentinesgiftt (npm)
1 compromised version
- Mar 11, 2025
Malware in valentinesgiftt
1 compromised version
- Mar 11, 2025
Malicious code in rexz-nsfw-detection (npm)
10 compromised versions
- Mar 11, 2025
Malicious code in rexz-imagine-ai (npm)
- Mar 11, 2025
Malware in rexz-nsfw-detection
1 compromised version
- Mar 11, 2025
Malware in rexz-imagine-ai
1 compromised version
- Mar 11, 2025
Malicious code in linear-zapier (npm)
- Mar 11, 2025
Malicious code in linear-open-issue (npm)
- Mar 11, 2025
Malware in linear-zapier
1 compromised version
- Mar 11, 2025
Malware in linear-open-issue
1 compromised version
- Mar 11, 2025
Malicious code in linear-file-upload-example (npm)
- Mar 11, 2025
Malware in linear-file-upload-example
1 compromised version
- Mar 11, 2025
Malicious code in init-spa (npm)
1 compromised version
- Mar 11, 2025
Malicious code in cta-agency-backoffice (npm)
1 compromised version
- Mar 11, 2025
Malicious code in crd-frontend-login (npm)
1 compromised version
- Mar 11, 2025
Malicious code in angularonlineauthclient (npm)
1 compromised version
- Mar 11, 2025
Malware in cta-agency-backoffice
1 compromised version
- Mar 11, 2025
Malware in angularonlineauthclient
1 compromised version
- Mar 11, 2025
Malware in init-spa
1 compromised version
- Mar 11, 2025
Malware in cuenta-ahorro
1 compromised version
- Mar 11, 2025
Malware in crd-frontend-login
1 compromised version
- Mar 11, 2025
Malware in cta-onboard-express
1 compromised version
- Mar 11, 2025
Malicious code in referrals-landing-page (npm)
1 compromised version
- Mar 11, 2025
Malicious code in radiodesign (npm)
1 compromised version
- Mar 11, 2025
Malicious code in radar-frontend (npm)
1 compromised version
- Mar 11, 2025
Malicious code in ngweb (npm)
2 compromised versions
- Mar 11, 2025
Malicious code in gss.survey.application (npm)
8 compromised versions
- Mar 11, 2025
Malicious code in cpp-spa-loginad (npm)
2 compromised versions
- Mar 11, 2025
Malicious code in autogestion-aprendizaje (npm)
1 compromised version
- Mar 11, 2025
Malware in radiodesign
1 compromised version
Page 5937 of 6,634