Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Feb 7, 2025
Malicious code in pistache-io (npm)
1 compromised version
- Feb 7, 2025
Malicious code in kvpair_db_upgrade (npm)
1 compromised version
- Feb 7, 2025
Malicious code in dex-api-library (npm)
1 compromised version
- Feb 7, 2025
Malicious code in cosmwasmjs-demo (npm)
1 compromised version
- Feb 7, 2025
Malware in zkwasm-poc
1 compromised version
- Feb 7, 2025
Malware in autogen_studio
1 compromised version
- Feb 7, 2025
Malware in cosmwasmjs-demo
1 compromised version
- Feb 7, 2025
Malware in sparo-real-repo-test
1 compromised version
- Feb 7, 2025
Malware in zkpay-plonky2-contract
1 compromised version
- Feb 7, 2025
Malware in pnpm-sync-api-tests
1 compromised version
- Feb 7, 2025
Malware in pistache-io
1 compromised version
- Feb 7, 2025
Malware in wasmer-term
1 compromised version
- Feb 7, 2025
Malware in dex-api-library
1 compromised version
- Feb 7, 2025
Malware in kvpair_db_upgrade
1 compromised version
- Feb 7, 2025
Malicious code in nebulagl-h3-hexagon-editing (npm)
3 compromised versions
- Feb 7, 2025
Malicious code in dojo_2 (npm)
4 compromised versions
- Feb 7, 2025
Malicious code in afip-example-api (npm)
1 compromised version
- Feb 7, 2025
Malware in dojo_2
1 compromised version
- Feb 7, 2025
Malware in afip-example-api
1 compromised version
- Feb 7, 2025
Malware in nebulagl-h3-hexagon-editing
1 compromised version
- Feb 7, 2025
Malicious code in growthbook-app (npm)
1 compromised version
- Feb 7, 2025
Malicious code in etsy.github.io (npm)
1 compromised version
- Feb 7, 2025
Malware in growthbook-app
1 compromised version
- Feb 7, 2025
Malware in etsy.github.io
1 compromised version
- Feb 7, 2025
Malicious code in internallib_v331 (npm)
1 compromised version
- Feb 7, 2025
Malware in internallib_v331
1 compromised version
- Feb 7, 2025
Malicious code in internallib_v666 (npm)
1 compromised version
- Feb 7, 2025
Malicious code in internallib_v185 (npm)
1 compromised version
- Feb 7, 2025
Malware in internallib_v185
1 compromised version
- Feb 7, 2025
Malware in internallib_v666
1 compromised version
- Feb 7, 2025
Malicious code in react-scripts-win (npm)
9 compromised versions
- Feb 7, 2025
Malware in react-scripts-win
1 compromised version
- Feb 7, 2025
Malware in bigcommerce.github.io
1 compromised version
- Feb 7, 2025
Malware in dell.github.io
1 compromised version
- Feb 7, 2025
Malicious code in fluencelabs.github.io (npm)
1 compromised version
- Feb 7, 2025
Malware in mathworks.github.io
1 compromised version
- Feb 7, 2025
Malware in apple.github.io
1 compromised version
- Feb 7, 2025
Malware in fluencelabs.github.io
1 compromised version
- Feb 7, 2025
Malicious code in slack-azure-notifier (npm)
1 compromised version
- Feb 7, 2025
Malware in slack-azure-notifier
1 compromised version
- Feb 3, 2025
Malicious code in libhash-js (npm)
- Feb 3, 2025
Malware in libhash-js
1 compromised version
- Feb 3, 2025
Malicious code in x-tree-view (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in web3-trade (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in u-workflow.utils-legacy (npm)
1 compromised version
- Feb 3, 2025
Malicious code in tree-sitter-sqlite (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in trace-production (npm)
1 compromised version
- Feb 3, 2025
Malicious code in toptal-react-bikes (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in sjzxy (npm)
1 compromised version
- Feb 3, 2025
Malicious code in safe-modules (npm)
1 compromised version
Page 5983 of 6,647