Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 4, 2025
Malware in @fcss/ui-component-library
1 compromised version
- Mar 4, 2025
Malware in aws-ui-component-select
1 compromised version
- Mar 4, 2025
Malware in angular-identity-component
1 compromised version
- Mar 4, 2025
Malicious code in wishorn-log (npm)
- Mar 4, 2025
Malware in wishorn-log
1 compromised version
- Mar 4, 2025
Malicious code in amazon-codewhisperer-jupyterlab-ext (npm)
1 compromised version
- Mar 4, 2025
Malware in amazon-codewhisperer-jupyterlab-ext
1 compromised version
- Mar 4, 2025
Malicious code in toloka-ui (npm)
6 compromised versions
- Mar 4, 2025
Malicious code in blackhoole (npm)
2 compromised versions
- Mar 4, 2025
Malware in toloka-ui
1 compromised version
- Mar 4, 2025
Malware in blackhoole
1 compromised version
- Mar 4, 2025
Malicious code in sol-web3-bundler (npm)
- Mar 4, 2025
Malicious code in bsc-web3-bundler (npm)
- Mar 4, 2025
Malware in bsc-web3-bundler
1 compromised version
- Mar 4, 2025
Malware in sol-web3-bundler
1 compromised version
- Mar 4, 2025
Malicious code in @cdplinetest/user-account-spec (npm)
2 compromised versions
- Mar 4, 2025
Malware in @cdplinetest/user-account-spec
1 compromised version
- Mar 4, 2025
Malicious code in provider-wallet (npm)
- Mar 4, 2025
Malware in provider-wallet
1 compromised version
- Mar 4, 2025
Malicious code in @ton-wallet/create (npm)
- Mar 4, 2025
Malware in @ton-wallet/create
1 compromised version
- Mar 4, 2025
Malicious code in @usaa-grp-ent-conv-platform/usaa (npm)
19 compromised versions
- Mar 4, 2025
Malware in @usaa-grp-ent-conv-platform/usaa
1 compromised version
- Mar 4, 2025
Malware in zztest82
1 compromised version
- Mar 4, 2025
Malware in zztest890
1 compromised version
- Mar 4, 2025
Malware in zzmaliciouspackage
1 compromised version
- Mar 4, 2025
Malware in @roku-web-ui/standard-footer
1 compromised version
- Mar 4, 2025
Malicious code in lappsec-testpackage (npm)
1 compromised version
- Mar 4, 2025
Malicious code in kitchensink-ui-base (npm)
- Mar 4, 2025
Malicious code in @roku-web-ui/legacy-styleguide (npm)
- Mar 4, 2025
Malicious code in @roku-web-ui/legacy-nav-page-standard-wrapper (npm)
- Mar 4, 2025
Malicious code in @roku-web-ui/kitchensink-ui-base (npm)
4 compromised versions
- Mar 4, 2025
Malicious code in @roku-web-ui/header (npm)
- Mar 4, 2025
Malware in @roku-web-ui/legacy-nav-page-standard-wrapper
1 compromised version
- Mar 4, 2025
Malware in kitchensink-ui-base
1 compromised version
- Mar 4, 2025
Malware in lappsec-testpackage
1 compromised version
- Mar 4, 2025
Malware in @roku-web-ui/header
1 compromised version
- Mar 4, 2025
Malware in @roku-web-ui/modal
1 compromised version
- Mar 4, 2025
Malware in @roku-web-ui/legacy-styleguide
1 compromised version
- Mar 4, 2025
Malware in @roku-web-ui/pills
1 compromised version
- Mar 4, 2025
Malware in @roku-web-ui/kitchensink-ui-base
1 compromised version
- Mar 4, 2025
Malicious code in header-account-flyout (npm)
1 compromised version
- Mar 4, 2025
Malware in cse-common-arch--long-running-app--create-vm-cf
1 compromised version
- Mar 4, 2025
Malware in metamask-sdk-create-react-app
1 compromised version
- Mar 4, 2025
Malware in header-account-flyout
1 compromised version
- Mar 4, 2025
Malware in metamask-design-tokens-tailwind
1 compromised version
- Mar 4, 2025
Malware in zooplus
1 compromised version
- Mar 4, 2025
Malware in app_custom_pinterest
1 compromised version
- Mar 4, 2025
Malware in clubhouse-to-linear-exporter
1 compromised version
- Mar 4, 2025
Malware in int_pinterest_sfra
1 compromised version
Page 5943 of 6,634