Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 5, 2025
Malware in nazir-botjs
1 compromised version
- Mar 5, 2025
Malware in nazir-scraper
1 compromised version
- Mar 5, 2025
Malicious code in leonardo-nomorepo (npm)
- Mar 5, 2025
Malware in leonardo-nomorepo
1 compromised version
- Mar 5, 2025
Malware in wkndaemassetcompute
1 compromised version
- Mar 5, 2025
Malware in ab-typescript-app
1 compromised version
- Mar 5, 2025
Malicious code in leonardo-monorepo (npm)
- Mar 5, 2025
Malicious code in franklin-service (npm)
- Mar 5, 2025
Malware in leonardo-monorepo
1 compromised version
- Mar 5, 2025
Malware in franklin-service
1 compromised version
- Mar 5, 2025
Malicious code in aem-headless-advanced-tutorial-wknd-app (npm)
- Mar 5, 2025
Malware in aem-headless-advanced-tutorial-wknd-app
1 compromised version
- Mar 5, 2025
Malicious code in requireform (npm)
- Mar 5, 2025
Malicious code in @adminproxy/module-utils-server (npm)
- Mar 5, 2025
Malicious code in @adminproxy/module-utils-common (npm)
- Mar 5, 2025
Malicious code in @adminproxy/module-utils-client (npm)
- Mar 5, 2025
Malware in @adminproxy/module-utils-client
1 compromised version
- Mar 5, 2025
Malware in requireform
1 compromised version
- Mar 5, 2025
Malware in @adminproxy/module-utils-server
1 compromised version
- Mar 5, 2025
Malware in @adminproxy/module-utils-common
1 compromised version
- Mar 5, 2025
Malicious code in swerve-ui (npm)
2 compromised versions
- Mar 5, 2025
Malicious code in safe-events-service (npm)
- Mar 5, 2025
Malicious code in grafana-resources-exporter-app (npm)
1 compromised version
- Mar 5, 2025
Malicious code in base-plugin (npm)
4 compromised versions
- Mar 5, 2025
Malicious code in async-query-data (npm)
2 compromised versions
- Mar 5, 2025
Malicious code in adyen-web-main (npm)
1 compromised version
- Mar 5, 2025
Malware in atpw-reactive-form
1 compromised version
- Mar 5, 2025
Malware in rdocs-light
1 compromised version
- Mar 5, 2025
Malware in adyenaddon
1 compromised version
- Mar 5, 2025
Malware in grafana-metricsdrilldown-app
1 compromised version
- Mar 5, 2025
Malware in learning-kotlin
1 compromised version
- Mar 5, 2025
Malware in adyen-web-main
1 compromised version
- Mar 5, 2025
Malware in async-query-data
1 compromised version
- Mar 5, 2025
Malware in safe-client-gateway
1 compromised version
- Mar 5, 2025
Malware in react-native-survicate
1 compromised version
- Mar 5, 2025
Malware in safe-events-service
1 compromised version
- Mar 5, 2025
Malware in base-plugin
1 compromised version
- Mar 5, 2025
Malware in grafana-resources-exporter-app
1 compromised version
- Mar 5, 2025
Malware in swerve-ui
1 compromised version
- Mar 5, 2025
Malware in metrics-aggregator
1 compromised version
- Mar 5, 2025
Malware in timify-packager
1 compromised version
- Mar 5, 2025
Malicious code in node-unzip (npm)
2 compromised versions
- Mar 5, 2025
Malicious code in makerspace-cpx-intro (npm)
- Mar 5, 2025
Malicious code in innersource-sig (npm)
- Mar 5, 2025
Malicious code in fdc3-web-monorepo (npm)
- Mar 5, 2025
Malicious code in existdb-node (npm)
- Mar 5, 2025
Malicious code in ccf-identity (npm)
- Mar 5, 2025
Malware in existdb-node
1 compromised version
- Mar 5, 2025
Malware in package-inherit
1 compromised version
- Mar 5, 2025
Malware in azps
1 compromised version
Page 5940 of 6,634