Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 4, 2025
Malicious code in morpho-blue-irm (npm)
1 compromised version
- Mar 4, 2025
Malicious code in link-outside-nest (npm)
2 compromised versions
- Mar 4, 2025
Malicious code in celo-token-list (npm)
1 compromised version
- Mar 4, 2025
Malicious code in analyzer_plugin (npm)
2 compromised versions
- Mar 4, 2025
Malware in morpho-blue-irm
1 compromised version
- Mar 4, 2025
Malware in huma-contracts-v2
1 compromised version
- Mar 4, 2025
Malware in analyzer_plugin
1 compromised version
- Mar 4, 2025
Malware in safe-backend-integration
1 compromised version
- Mar 4, 2025
Malware in link-outside-nest
1 compromised version
- Mar 4, 2025
Malware in react-native-wallet-sdk-demo-app
1 compromised version
- Mar 4, 2025
Malware in web3-2-alpha
1 compromised version
- Mar 4, 2025
Malware in ufarm-evm-contracts
1 compromised version
- Mar 4, 2025
Malware in synapse-contracts
1 compromised version
- Mar 4, 2025
Malware in celo-token-list
1 compromised version
- Mar 4, 2025
Malicious code in webauthn-codelab (npm)
- Mar 4, 2025
Malicious code in vue-integration (npm)
- Mar 4, 2025
Malicious code in sample-action (npm)
- Mar 4, 2025
Malicious code in saml-sp-linking-sample (npm)
- Mar 4, 2025
Malicious code in safe-apps-list (npm)
1 compromised version
- Mar 4, 2025
Malicious code in pkl-lang.org (npm)
- Mar 4, 2025
Malicious code in organizer-nodejs (npm)
- Mar 4, 2025
Malicious code in nncd (npm)
2 compromised versions
- Mar 4, 2025
Malicious code in hh-sol-artifact-1 (npm)
- Mar 4, 2025
Malicious code in discord-getting-started (npm)
1 compromised version
- Mar 4, 2025
Malicious code in com.unity.2d.animation (npm)
4 compromised versions
- Mar 4, 2025
Malicious code in com.github-glitchenzo.nugetforunit (npm)
- Mar 4, 2025
Malware in com.github-glitchenzo.nugetforunit
1 compromised version
- Mar 4, 2025
Malware in sample-action
1 compromised version
- Mar 4, 2025
Malware in sample-schema-mgmt
1 compromised version
- Mar 4, 2025
Malware in com.unity.2d.animation
1 compromised version
- Mar 4, 2025
Malware in discord-getting-started
1 compromised version
- Mar 4, 2025
Malware in vue-integration
1 compromised version
- Mar 4, 2025
Malware in saml-sp-linking-sample
1 compromised version
- Mar 4, 2025
Malware in nncd
1 compromised version
- Mar 4, 2025
Malware in organizer-nodejs
1 compromised version
- Mar 4, 2025
Malware in webauthn-codelab
1 compromised version
- Mar 4, 2025
Malware in safe-apps-list
1 compromised version
- Mar 4, 2025
Malware in pkl-lang.org
1 compromised version
- Mar 4, 2025
Malware in hh-sol-artifact-1
1 compromised version
- Mar 4, 2025
Malicious code in connector-colaborator1 (npm)
1 compromised version
- Mar 4, 2025
Malicious code in connector-colaborator (npm)
1 compromised version
- Mar 4, 2025
Malicious code in unms-server (npm)
1 compromised version
- Mar 4, 2025
Malicious code in product-custom-grid-columns (npm)
1 compromised version
- Mar 4, 2025
Malicious code in aem-maven-archetype (npm)
1 compromised version
- Mar 4, 2025
Malicious code in qaboard (npm)
1 compromised version
- Mar 4, 2025
Malicious code in safe-client-gateway (npm)
2 compromised versions
- Mar 4, 2025
Malicious code in learning-kotlin (npm)
1 compromised version
- Mar 4, 2025
Malicious code in atpw-reactive-form (npm)
1 compromised version
- Mar 4, 2025
Malicious code in subnplanmgmtserv (npm)
2 compromised versions
- Mar 4, 2025
Malicious code in subscriptionmgmtserv (npm)
2 compromised versions
Page 5945 of 6,634