Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 3, 2025
Malware in @ethena/shared-ui
1 compromised version
- Mar 3, 2025
Malware in @f2p-mml-frontends/mml-components
1 compromised version
- Mar 3, 2025
Malicious code in wefweg32 (npm)
- Mar 3, 2025
Malicious code in mercury-web (npm)
- Mar 3, 2025
Malicious code in @dealfront/df-dictionaries (npm)
- Mar 3, 2025
Malware in wefweg32
1 compromised version
- Mar 3, 2025
Malware in @dealfront/df-dictionaries
1 compromised version
- Mar 3, 2025
Malware in mercury-web
1 compromised version
- Mar 3, 2025
Malicious code in internallib_v137 (npm)
1 compromised version
- Mar 3, 2025
Malware in internallib_v137
1 compromised version
- Mar 3, 2025
Malicious code in twitter-sc (npm)
- Mar 3, 2025
Malicious code in tg-shell-installer (npm)
- Mar 3, 2025
Malicious code in tg-shell-bot (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in my-node-startup (npm)
6 compromised versions
- Mar 3, 2025
Malware in twitter-sc
1 compromised version
- Mar 3, 2025
Malware in my-node-startup
1 compromised version
- Mar 3, 2025
Malware in tg-shell-installer
1 compromised version
- Mar 3, 2025
Malware in tg-shell-bot
1 compromised version
- Mar 3, 2025
Malicious code in internallib_v488 (npm)
1 compromised version
- Mar 3, 2025
Malware in internallib_v488
1 compromised version
- Mar 3, 2025
Malicious code in internallib_v590 (npm)
3 compromised versions
- Mar 3, 2025
Malware in internallib_v590
1 compromised version
- Mar 3, 2025
Malicious code in staked-celo-app (npm)
- Mar 3, 2025
Malicious code in self-focused (npm)
- Mar 3, 2025
Malicious code in segment-anything-mini-demo (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sc-twitter (npm)
- Mar 3, 2025
Malicious code in paypal-sdk-server-side-integration (npm)
- Mar 3, 2025
Malicious code in ossar-action (npm)
- Mar 3, 2025
Malicious code in minipay-minidapps (npm)
- Mar 3, 2025
Malicious code in jfrog-ide-webview (npm)
- Mar 3, 2025
Malicious code in jfrog-docker-desktop-extension (npm)
- Mar 3, 2025
Malicious code in grpc-examples (npm)
- Mar 3, 2025
Malicious code in eyeglass-multirepo (npm)
- Mar 3, 2025
Malicious code in console-node-ts (npm)
1 compromised version
- Mar 3, 2025
Malicious code in com.frl.aepsych (npm)
- Mar 3, 2025
Malicious code in traceviz-client-core (npm)
1 compromised version
- Mar 3, 2025
Malicious code in npm-manifest (npm)
1 compromised version
- Mar 3, 2025
Malicious code in common-typeface-termina (npm)
1 compromised version
- Mar 3, 2025
Malicious code in bindbc-sdl (npm)
2 compromised versions
- Mar 3, 2025
Malware in com.frl.aepsych
1 compromised version
- Mar 3, 2025
Malware in minipay-minidapps
1 compromised version
- Mar 3, 2025
Malware in common-typeface-termina
1 compromised version
- Mar 3, 2025
Malware in console-node-ts
1 compromised version
- Mar 3, 2025
Malware in jfrog-ide-webview
1 compromised version
- Mar 3, 2025
Malware in self-focused
1 compromised version
- Mar 3, 2025
Malware in sc-twitter
1 compromised version
- Mar 3, 2025
Malware in staked-celo-app
1 compromised version
- Mar 3, 2025
Malware in jfrog-docker-desktop-extension
1 compromised version
- Mar 3, 2025
Malware in segment-anything-mini-demo
1 compromised version
- Mar 3, 2025
Malware in npm-manifest
1 compromised version
Page 5952 of 6,634