Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 4, 2025
Malicious code in buttonfactoryserv-paypal (npm)
4 compromised versions
- Mar 3, 2025
Malicious code in orchestration-types (npm)
1 compromised version
- Mar 3, 2025
Malicious code in vdkweb-utils (npm)
1 compromised version
- Mar 3, 2025
Malicious code in vladmandic (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in aws-features-signin-proxy-client (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in adyenaddon (npm)
1 compromised version
- Mar 3, 2025
Malicious code in calculated_members_message (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in timify-packager (npm)
1 compromised version
- Mar 3, 2025
Malicious code in configs-web-react (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in wpcom-checkout (npm)
1 compromised version
- Mar 3, 2025
Malicious code in worldpay-raft-connector (npm)
1 compromised version
- Mar 3, 2025
Malicious code in workerd-linux-arm64 (npm)
1 compromised version
- Mar 3, 2025
Malicious code in wg-fps-stats (npm)
9 compromised versions
- Mar 3, 2025
Malicious code in web-attendant (npm)
1 compromised version
- Mar 3, 2025
Malicious code in vuepress-plugin-test-analytics (npm)
1 compromised version
- Mar 3, 2025
Malicious code in upm-template-utils (npm)
8 compromised versions
- Mar 3, 2025
Malicious code in unityeditor-collab-toolbar (npm)
1 compromised version
- Mar 3, 2025
Malicious code in unityeditor-collab-history (npm)
1 compromised version
- Mar 3, 2025
Malicious code in unityeditor-cloud-hub (npm)
1 compromised version
- Mar 3, 2025
Malicious code in unity-editor-home (npm)
1 compromised version
- Mar 3, 2025
Malicious code in typespec-ts-interface-emitter (npm)
1 compromised version
- Mar 3, 2025
Malicious code in tsign-uix (npm)
1 compromised version
- Mar 3, 2025
Malicious code in tsign-ui (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in tidebot (npm)
1 compromised version
- Mar 3, 2025
Malicious code in testingthebreez (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sysaid-query-data (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sysaid-components-lib (npm)
1 compromised version
- Mar 3, 2025
Malicious code in stylex-monorepo (npm)
5 compromised versions
- Mar 3, 2025
Malicious code in secure-install-package (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-polygon (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-near (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-ltc (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-hbar (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-ethw (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-eth2 (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-eth (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-etc (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in sdk-coin-eos (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in sdk-coin-dot (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in sdk-coin-doge (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-dash (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-cspr (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-celo (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-btg (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sasdsdasdsdsda (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sally-fw (npm)
1 compromised version
- Mar 3, 2025
Malicious code in reqmanagementui (npm)
1 compromised version
- Mar 3, 2025
Malicious code in req-management-ui (npm)
1 compromised version
- Mar 3, 2025
Malicious code in react-v18 (npm)
1 compromised version
- Mar 3, 2025
Malicious code in react-redux-v8 (npm)
1 compromised version
Page 5946 of 6,634