Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 11, 2025
Malware in cpp-spa-loginad
1 compromised version
- Mar 11, 2025
Malware in autogestion-aprendizaje
1 compromised version
- Mar 11, 2025
Malware in ngweb
1 compromised version
- Mar 11, 2025
Malware in referrals-landing-page
1 compromised version
- Mar 11, 2025
Malware in radar-frontend
1 compromised version
- Mar 11, 2025
Malware in gss.survey.application
1 compromised version
- Mar 11, 2025
Malicious code in app-register (npm)
- Mar 11, 2025
Malware in app-register
1 compromised version
- Mar 11, 2025
Malicious code in web-tracing-framework (npm)
1 compromised version
- Mar 11, 2025
Malicious code in veryimportantdigiasdf (npm)
1 compromised version
- Mar 11, 2025
Malicious code in small-awesome-shop (npm)
1 compromised version
- Mar 11, 2025
Malicious code in simple-export-map (npm)
3 compromised versions
- Mar 11, 2025
Malicious code in relay-prototyping-tools (npm)
1 compromised version
- Mar 11, 2025
Malicious code in react-textfit-example (npm)
1 compromised version
- Mar 11, 2025
Malicious code in psd2-registration-example-ts (npm)
3 compromised versions
- Mar 11, 2025
Malicious code in nl-wallet-web (npm)
3 compromised versions
- Mar 11, 2025
Malicious code in mijn-bureau-portal (npm)
3 compromised versions
- Mar 11, 2025
Malicious code in example-nodejs-express (npm)
1 compromised version
- Mar 11, 2025
Malicious code in ember-js-buy (npm)
1 compromised version
- Mar 11, 2025
Malicious code in ee-server-auth-nodejs (npm)
1 compromised version
- Mar 11, 2025
Malicious code in custom-networking-behavior (npm)
1 compromised version
- Mar 11, 2025
Malicious code in chocolatechipjs-shopify (npm)
1 compromised version
- Mar 11, 2025
Malicious code in ai-verify-shared-library (npm)
3 compromised versions
- Mar 11, 2025
Malware in react-textfit-example
1 compromised version
- Mar 11, 2025
Malware in nl-wallet-web
1 compromised version
- Mar 11, 2025
Malware in web-tracing-framework
1 compromised version
- Mar 11, 2025
Malware in ember-js-buy
1 compromised version
- Mar 11, 2025
Malware in psd2-registration-example-ts
1 compromised version
- Mar 11, 2025
Malware in ee-cloud-functions
1 compromised version
- Mar 11, 2025
Malware in ee-server-auth-nodejs
1 compromised version
- Mar 11, 2025
Malware in chocolatechipjs-shopify
1 compromised version
- Mar 11, 2025
Malware in mijn-bureau-portal
1 compromised version
- Mar 11, 2025
Malware in veryimportantdigiasdf
1 compromised version
- Mar 11, 2025
Malware in small-awesome-shop
1 compromised version
- Mar 11, 2025
Malware in relay-prototyping-tools
1 compromised version
- Mar 11, 2025
Malware in ai-verify-shared-library
1 compromised version
- Mar 11, 2025
Malware in simple-export-map
1 compromised version
- Mar 11, 2025
Malware in example-nodejs-express
1 compromised version
- Mar 11, 2025
Malware in custom-networking-behavior
1 compromised version
- Mar 11, 2025
Malware in @supera/share
1 compromised version
- Mar 11, 2025
Malware in @supera/asjnakwndlja
1 compromised version
- Mar 11, 2025
Malware in @supera/aaaaaaaaaaa
1 compromised version
- Mar 11, 2025
Malware in @supera/shared
1 compromised version
- Mar 11, 2025
Malicious code in cb4good (npm)
1 compromised version
- Mar 11, 2025
Malicious code in @partner-tech/pax-illustrations (npm)
2 compromised versions
- Mar 11, 2025
Malicious code in pixelary (npm)
6 compromised versions
- Mar 11, 2025
Malicious code in limit-order-validation (npm)
1 compromised version
- Mar 10, 2025
Malicious code in nyc-config (npm)
102 compromised versions
- Mar 10, 2025
Malicious code in atlas-user-monitor (npm)
2 compromised versions
- Mar 10, 2025
Malicious code in layouts-lib (npm)
1 compromised version
Page 5938 of 6,634