Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 3, 2025
Malicious code in explat-client-react-helpers (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in explat-client (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in eslint-plugin-wpvip (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in epicagames-test (npm)
1 compromised version
- Mar 3, 2025
Malicious code in epicagames-sync (npm)
1 compromised version
- Mar 3, 2025
Malicious code in epicagames-service (npm)
1 compromised version
- Mar 3, 2025
Malicious code in epicagames-sdk (npm)
1 compromised version
- Mar 3, 2025
Malicious code in epicagames-db (npm)
1 compromised version
- Mar 3, 2025
Malicious code in epicagames-database (npm)
1 compromised version
- Mar 3, 2025
Malicious code in epicagames-connect (npm)
1 compromised version
- Mar 3, 2025
Malicious code in epicagames-cloud (npm)
1 compromised version
- Mar 3, 2025
Malicious code in epicagames-checkout (npm)
1 compromised version
- Mar 3, 2025
Malicious code in epicagames-cache (npm)
1 compromised version
- Mar 3, 2025
Malicious code in epicagames-auth (npm)
1 compromised version
- Mar 3, 2025
Malicious code in epicagames-api-client (npm)
1 compromised version
- Mar 3, 2025
Malicious code in epicagames-api (npm)
1 compromised version
- Mar 3, 2025
Malicious code in epicagames-analytics (npm)
1 compromised version
- Mar 3, 2025
Malicious code in epam-cdisc-electron (npm)
1 compromised version
- Mar 3, 2025
Malicious code in engineering-blog (npm)
12 compromised versions
- Mar 3, 2025
Malicious code in embroider (npm)
3 compromised versions
- Mar 3, 2025
Malicious code in editions-dev-2k-variants (npm)
1 compromised version
- Mar 3, 2025
Malicious code in dw-api-mock2 (npm)
4 compromised versions
- Mar 3, 2025
Malicious code in dropbox-internal (npm)
1 compromised version
- Mar 3, 2025
Malicious code in dropbox-gateway (npm)
1 compromised version
- Mar 3, 2025
Malicious code in dropbox-event (npm)
1 compromised version
- Mar 3, 2025
Malicious code in dropbox-cloud (npm)
1 compromised version
- Mar 3, 2025
Malicious code in dropbox-checkout (npm)
1 compromised version
- Mar 3, 2025
Malicious code in dropbox-auth (npm)
1 compromised version
- Mar 3, 2025
Malicious code in dropbox-api-client (npm)
1 compromised version
- Mar 3, 2025
Malicious code in dropbox-analytics (npm)
1 compromised version
- Mar 3, 2025
Malicious code in dropbox-admin (npm)
1 compromised version
- Mar 3, 2025
Malicious code in datlowe-font (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in ctmjobs (npm)
1 compromised version
- Mar 3, 2025
Malicious code in com.unity.visualscripting (npm)
1 compromised version
- Mar 3, 2025
Malicious code in com.unity.sentis (npm)
1 compromised version
- Mar 3, 2025
Malicious code in com.unity.render-pipelines.high-definition (npm)
1 compromised version
- Mar 3, 2025
Malicious code in com.unity.learn.iet-framework (npm)
1 compromised version
- Mar 3, 2025
Malicious code in coinbase-utils (npm)
1 compromised version
- Mar 3, 2025
Malicious code in coinbase-user (npm)
1 compromised version
- Mar 3, 2025
Malicious code in coinbase-model (npm)
1 compromised version
- Mar 3, 2025
Malicious code in coinbase-logger (npm)
1 compromised version
- Mar 3, 2025
Malicious code in coinbase-jira (npm)
1 compromised version
- Mar 3, 2025
Malicious code in coinbase-internal (npm)
1 compromised version
- Mar 3, 2025
Malicious code in coinbase-gateway (npm)
1 compromised version
- Mar 3, 2025
Malicious code in coinbase-event (npm)
1 compromised version
- Mar 3, 2025
Malicious code in coinbase-db (npm)
1 compromised version
- Mar 3, 2025
Malicious code in coinbase-database (npm)
1 compromised version
- Mar 3, 2025
Malicious code in cmpuiforoath (npm)
10 compromised versions
- Mar 3, 2025
Malicious code in cito_frontend (npm)
1 compromised version
- Mar 3, 2025
Malicious code in ciaoaibot-test (npm)
1 compromised version
Page 5949 of 6,634