Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 5, 2025
Malware in alexpavlov--jquery-suggestable
1 compromised version
- Mar 5, 2025
Malware in aave-v3-crosschain-listing-template
1 compromised version
- Mar 5, 2025
Malware in ncw-eddsa-signing
1 compromised version
- Mar 5, 2025
Malware in totem-project-website
1 compromised version
- Mar 5, 2025
Malicious code in test-hahahaha-rce3 (npm)
- Mar 5, 2025
Malicious code in test-hahahaha-rce2 (npm)
- Mar 5, 2025
Malicious code in test-hahahaha-rce1 (npm)
- Mar 5, 2025
Malicious code in test-hahahaha-rce (npm)
- Mar 5, 2025
Malware in test-hahahaha-rce3
1 compromised version
- Mar 5, 2025
Malware in test-hahahaha-rce2
1 compromised version
- Mar 5, 2025
Malware in test-hahahaha-rce1
1 compromised version
- Mar 5, 2025
Malware in ing-open-banking-cli-js
1 compromised version
- Mar 5, 2025
Malware in test-hahahaha-rce
1 compromised version
- Mar 5, 2025
Malicious code in @idme-components/component-utilities (npm)
4 compromised versions
- Mar 5, 2025
Malicious code in dexter-server (npm)
1 compromised version
- Mar 5, 2025
Malicious code in migrate-npm-registry (npm)
1 compromised version
- Mar 5, 2025
Malicious code in sdxcode1 (npm)
1 compromised version
- Mar 5, 2025
Malicious code in nmp-frontend-libraries (npm)
3 compromised versions
- Mar 5, 2025
Malicious code in d4rk0nm3 (npm)
1 compromised version
- Mar 4, 2025
Malicious code in adminauthserv-paypal (npm)
2 compromised versions
- Mar 4, 2025
Malicious code in symphony-data-map (npm)
3 compromised versions
- Mar 4, 2025
Malicious code in ddataflow (npm)
1 compromised version
- Mar 4, 2025
Malicious code in vue-custom-widget-template1 (npm)
- Mar 4, 2025
Malicious code in v1ue-custom-widget-template (npm)
- Mar 4, 2025
Malicious code in testaaa11 (npm)
- Mar 4, 2025
Malicious code in nnnn1111222 (npm)
- Mar 4, 2025
Malicious code in my-custom-vue-widget (npm)
- Mar 4, 2025
Malicious code in amis-widget77777 (npm)
- Mar 4, 2025
Malicious code in amis-widget333 (npm)
- Mar 4, 2025
Malware in amis-widget77777
1 compromised version
- Mar 4, 2025
Malware in my-custom-vue-widget
1 compromised version
- Mar 4, 2025
Malware in nnnn1111222
1 compromised version
- Mar 4, 2025
Malware in testaaa11
1 compromised version
- Mar 4, 2025
Malware in v1ue-custom-widget-template
1 compromised version
- Mar 4, 2025
Malware in vue-custom-widget-template1
1 compromised version
- Mar 4, 2025
Malware in amis-widget333
1 compromised version
- Mar 4, 2025
Malicious code in amis-test1 (npm)
- Mar 4, 2025
Malware in amis-test1
1 compromised version
- Mar 4, 2025
Malicious code in mahesh.testpackage (npm)
- Mar 4, 2025
Malicious code in aws-ui-component-select (npm)
1 compromised version
- Mar 4, 2025
Malicious code in angular-identity-component (npm)
- Mar 4, 2025
Malicious code in al-schematics (npm)
- Mar 4, 2025
Malicious code in @siemens-ag/twodc-fonts (npm)
1 compromised version
- Mar 4, 2025
Malicious code in @fcss/ui-component-library (npm)
- Mar 4, 2025
Malicious code in @airtel-lego/sentry (npm)
1 compromised version
- Mar 4, 2025
Malware in @siemens-ag/twodc-fonts
1 compromised version
- Mar 4, 2025
Malware in @airtel-lego/sentry
1 compromised version
- Mar 4, 2025
Malware in @maheshtestorg/maheshtestpackage
1 compromised version
- Mar 4, 2025
Malware in mahesh.testpackage
1 compromised version
- Mar 4, 2025
Malware in al-schematics
1 compromised version
Page 5942 of 6,634