Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 10, 2025
Malicious code in atlas-websocket (npm)
6 compromised versions
- Mar 10, 2025
Malicious code in prblingd (npm)
2 compromised versions
- Mar 10, 2025
Malicious code in patternfly-build (npm)
1 compromised version
- Mar 8, 2025
Malicious code in zuaxnull (npm)
1 compromised version
- Mar 6, 2025
Malicious code in next-tab (npm)
1 compromised version
- Mar 6, 2025
Malicious code in testnet-contracts (npm)
1 compromised version
- Mar 6, 2025
Malicious code in realityspiral (npm)
1 compromised version
- Mar 6, 2025
Malicious code in sendbird-chat-sample-react (npm)
1 compromised version
- Mar 6, 2025
Malicious code in rif-lumino (npm)
1 compromised version
- Mar 6, 2025
Malicious code in @domons/test (npm)
1 compromised version
- Mar 6, 2025
Malicious code in wrap.scrt.network (npm)
1 compromised version
- Mar 6, 2025
Malicious code in depx-contract (npm)
1 compromised version
- Mar 6, 2025
Malicious code in midle-contracts (npm)
1 compromised version
- Mar 6, 2025
Malicious code in testsdvsdfsdf (npm)
3 compromised versions
- Mar 6, 2025
Malicious code in brunch-with-ember-reloaded (npm)
2 compromised versions
- Mar 6, 2025
Malware in brunch-with-ember-reloaded
1 compromised version
- Mar 6, 2025
Malware in realtime-examples
1 compromised version
- Mar 6, 2025
Malware in react-native-windows-repo
1 compromised version
- Mar 6, 2025
Malware in twilio-realtime
1 compromised version
- Mar 6, 2025
Malware in main-branch-check
1 compromised version
- Mar 6, 2025
Malware in mygcpconfusedfunctionpoctestpackage
1 compromised version
- Mar 6, 2025
Malware in myconfusedfunctionpoctestpackage
1 compromised version
- Mar 6, 2025
Malicious code in vtctld2 (npm)
- Mar 6, 2025
Malware in vtctld2
1 compromised version
- Mar 6, 2025
Malware in cloudsplaining
1 compromised version
- Mar 6, 2025
Malware in mkdocs-material
1 compromised version
- Mar 6, 2025
Malware in vite_ruby_monorepo
1 compromised version
- Mar 6, 2025
Malware in local_editor_top
1 compromised version
- Mar 6, 2025
Malicious code in opstooling-js-style (npm)
1 compromised version
- Mar 6, 2025
Malicious code in auth0-ai-js (npm)
1 compromised version
- Mar 6, 2025
Malicious code in userbridge-paypal (npm)
4 compromised versions
- Mar 6, 2025
Malicious code in bankingbundleserv (npm)
4 compromised versions
- Mar 6, 2025
Malicious code in userrelationship-paypal (npm)
3 compromised versions
- Mar 5, 2025
Malicious code in tommyboytesting (npm)
7 compromised versions
- Mar 5, 2025
Malicious code in crypto-invoicer (npm)
1 compromised version
- Mar 5, 2025
Malicious code in upload-testflight-action (npm)
1 compromised version
- Mar 5, 2025
Malicious code in zz-react-custom-widget (npm)
- Mar 5, 2025
Malicious code in zz-aipage-widget (npm)
- Mar 5, 2025
Malware in zz-aipage-widget
1 compromised version
- Mar 5, 2025
Malware in zz-react-custom-widget
1 compromised version
- Mar 5, 2025
Malicious code in process-log (npm)
- Mar 5, 2025
Malware in process-log
1 compromised version
- Mar 5, 2025
Malicious code in resc-frontend (npm)
- Mar 5, 2025
Malware in resc-frontend
1 compromised version
- Mar 5, 2025
Malicious code in fastapi.py (npm)
- Mar 5, 2025
Malware in fastapi.py
1 compromised version
- Mar 5, 2025
Malware in testapi1232
1 compromised version
- Mar 5, 2025
Malware in evoplay-spinential
1 compromised version
- Mar 5, 2025
Malicious code in nazir-scraper (npm)
- Mar 5, 2025
Malicious code in nazir-botjs (npm)
Page 5939 of 6,634