Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,330 total in npm · sorted newest first- Feb 28, 2025
Malware in mep-who
1 compromised version
- Feb 28, 2025
Malware in actsearchserv
1 compromised version
- Feb 28, 2025
Malicious code in ts-debugtools (npm)
3 compromised versions
- Feb 28, 2025
Malware in ts-debugtools
1 compromised version
- Feb 28, 2025
Malicious code in behat (npm)
- Feb 28, 2025
Malware in behat
1 compromised version
- Feb 28, 2025
Malicious code in ton-wallet (npm)
- Feb 28, 2025
Malicious code in mphantomed (npm)
- Feb 28, 2025
Malicious code in florida.js (npm)
- Feb 28, 2025
Malicious code in fetch-tickers (npm)
- Feb 28, 2025
Malicious code in fetch-futures (npm)
- Feb 28, 2025
Malicious code in ethereum-producer (npm)
- Feb 28, 2025
Malicious code in cis-photoshop-api-docs (npm)
3 compromised versions
- Feb 28, 2025
Malware in fetch-futures
1 compromised version
- Feb 28, 2025
Malware in cis-photoshop-api-docs
1 compromised version
- Feb 28, 2025
Malware in mphantomed
1 compromised version
- Feb 28, 2025
Malware in florida.js
1 compromised version
- Feb 28, 2025
Malware in fetch-tickers
1 compromised version
- Feb 28, 2025
Malware in ethereum-producer
1 compromised version
- Feb 28, 2025
Malware in ton-wallet
1 compromised version
- Feb 28, 2025
Malicious code in jazz_services-handler (npm)
3 compromised versions
- Feb 28, 2025
Malware in jazz_services-handler
1 compromised version
- Feb 28, 2025
Malware in suvauxlib
1 compromised version
- Feb 28, 2025
Malicious code in ts-alpha-archive (npm)
- Feb 28, 2025
Malicious code in ssr-data-router (npm)
- Feb 28, 2025
Malicious code in semaphore-airdrop (npm)
- Feb 28, 2025
Malicious code in package_events (npm)
- Feb 28, 2025
Malicious code in material-start (npm)
- Feb 28, 2025
Malicious code in lsp-sample-client (npm)
- Feb 28, 2025
Malicious code in issuecheck (npm)
- Feb 28, 2025
Malicious code in example-javascript (npm)
- Feb 28, 2025
Malicious code in basic-data-router (npm)
2 compromised versions
- Feb 28, 2025
Malware in ts-alpha-archive
1 compromised version
- Feb 28, 2025
Malware in material-start
1 compromised version
- Feb 28, 2025
Malware in example-javascript
1 compromised version
- Feb 28, 2025
Malware in ssr-data-router
1 compromised version
- Feb 28, 2025
Malware in basic-data-router
1 compromised version
- Feb 28, 2025
Malware in semaphore-airdrop
1 compromised version
- Feb 28, 2025
Malware in lsp-sample-client
1 compromised version
- Feb 28, 2025
Malware in package_events
1 compromised version
- Feb 28, 2025
Malware in issuecheck
1 compromised version
- Feb 28, 2025
Malware in infima-website
1 compromised version
- Feb 28, 2025
Malicious code in vinothzomato-foremandns (npm)
- Feb 28, 2025
Malicious code in typescript-fetch-test (npm)
- Feb 28, 2025
Malicious code in threads_api_sample (npm)
1 compromised version
- Feb 28, 2025
Malicious code in petstore-typescript-node-sample (npm)
- Feb 28, 2025
Malicious code in multipage-checkout (npm)
2 compromised versions
- Feb 28, 2025
Malicious code in ideal-paypal-payment-js-sdk (npm)
5 compromised versions
- Feb 28, 2025
Malicious code in golanci-lint-action (npm)
- Feb 28, 2025
Malicious code in financial-assistant (npm)
Page 5968 of 6,647