Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Feb 28, 2025
Malware in cmp-ocr-liveness-acquisition
1 compromised version
- Feb 28, 2025
Malware in paypal-checkout-integration-backend-node
1 compromised version
- Feb 28, 2025
Malware in jaws-node
1 compromised version
- Feb 28, 2025
Malware in pp-react-content-loader
1 compromised version
- Feb 28, 2025
Malware in cmp-dossier-tracking
1 compromised version
- Feb 28, 2025
Malware in the-integrator
1 compromised version
- Feb 28, 2025
Malware in keymakerclientapi
1 compromised version
- Feb 28, 2025
Malware in mep-widget-components
1 compromised version
- Feb 28, 2025
Malware in mep-who
1 compromised version
- Feb 28, 2025
Malware in actsearchserv
1 compromised version
- Feb 28, 2025
Malicious code in ts-debugtools (npm)
3 compromised versions
- Feb 28, 2025
Malware in ts-debugtools
1 compromised version
- Feb 28, 2025
Malicious code in behat (npm)
- Feb 28, 2025
Malware in behat
1 compromised version
- Feb 28, 2025
Malicious code in ton-wallet (npm)
- Feb 28, 2025
Malicious code in mphantomed (npm)
- Feb 28, 2025
Malicious code in florida.js (npm)
- Feb 28, 2025
Malicious code in fetch-tickers (npm)
- Feb 28, 2025
Malicious code in fetch-futures (npm)
- Feb 28, 2025
Malicious code in ethereum-producer (npm)
- Feb 28, 2025
Malicious code in cis-photoshop-api-docs (npm)
3 compromised versions
- Feb 28, 2025
Malware in fetch-futures
1 compromised version
- Feb 28, 2025
Malware in cis-photoshop-api-docs
1 compromised version
- Feb 28, 2025
Malware in mphantomed
1 compromised version
- Feb 28, 2025
Malware in florida.js
1 compromised version
- Feb 28, 2025
Malware in fetch-tickers
1 compromised version
- Feb 28, 2025
Malware in ethereum-producer
1 compromised version
- Feb 28, 2025
Malware in ton-wallet
1 compromised version
- Feb 28, 2025
Malicious code in jazz_services-handler (npm)
3 compromised versions
- Feb 28, 2025
Malware in jazz_services-handler
1 compromised version
- Feb 28, 2025
Malware in suvauxlib
1 compromised version
- Feb 28, 2025
Malicious code in ts-alpha-archive (npm)
- Feb 28, 2025
Malicious code in ssr-data-router (npm)
- Feb 28, 2025
Malicious code in semaphore-airdrop (npm)
- Feb 28, 2025
Malicious code in package_events (npm)
- Feb 28, 2025
Malicious code in material-start (npm)
- Feb 28, 2025
Malicious code in lsp-sample-client (npm)
- Feb 28, 2025
Malicious code in issuecheck (npm)
- Feb 28, 2025
Malicious code in example-javascript (npm)
- Feb 28, 2025
Malicious code in basic-data-router (npm)
2 compromised versions
- Feb 28, 2025
Malware in ts-alpha-archive
1 compromised version
- Feb 28, 2025
Malware in material-start
1 compromised version
- Feb 28, 2025
Malware in example-javascript
1 compromised version
- Feb 28, 2025
Malware in ssr-data-router
1 compromised version
- Feb 28, 2025
Malware in basic-data-router
1 compromised version
- Feb 28, 2025
Malware in semaphore-airdrop
1 compromised version
- Feb 28, 2025
Malware in lsp-sample-client
1 compromised version
- Feb 28, 2025
Malware in package_events
1 compromised version
- Feb 28, 2025
Malware in issuecheck
1 compromised version
- Feb 28, 2025
Malware in infima-website
1 compromised version
Page 5955 of 6,634