Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Feb 3, 2025
Malicious code in pulumi-eks-hello-world (npm)
1 compromised version
- Feb 3, 2025
Malicious code in proton-shared (npm)
1 compromised version
- Feb 3, 2025
Malicious code in private-lib-bug-bounty2.0 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in postject-copy (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in poc-creation (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in patrick-test (npm)
1 compromised version
- Feb 3, 2025
Malicious code in my-amazing-app (npm)
1 compromised version
- Feb 3, 2025
Malicious code in mozilla-addons-frontend (npm)
1 compromised version
- Feb 3, 2025
Malicious code in mongodb-chatbot-verified-answers (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in module-stub (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in model-viewer-space-opera (npm)
1 compromised version
- Feb 3, 2025
Malicious code in microsoft.netcore.universalwindowsplatform (npm)
1 compromised version
- Feb 3, 2025
Malicious code in microsoft.applicationinsights (npm)
1 compromised version
- Feb 3, 2025
Malicious code in micrometer-docs (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in matlab-proxy (npm)
8 compromised versions
- Feb 3, 2025
Malicious code in magika-website (npm)
1 compromised version
- Feb 3, 2025
Malicious code in llm_demo (npm)
1 compromised version
- Feb 3, 2025
Malicious code in levitate-check-imports (npm)
1 compromised version
- Feb 3, 2025
Malicious code in left-pad-browser (npm)
1 compromised version
- Feb 3, 2025
Malicious code in jquery.pstrength (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in jaeger-ui-monorepo (npm)
1 compromised version
- Feb 3, 2025
Malicious code in io-connect-24 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in ig-phantomjs-binaries (npm)
1 compromised version
- Feb 3, 2025
Malicious code in ig-grunt-release (npm)
1 compromised version
- Feb 3, 2025
Malicious code in ig-grunt-file-list (npm)
1 compromised version
- Feb 3, 2025
Malicious code in hubspottoolsmenu (npm)
1 compromised version
- Feb 3, 2025
Malicious code in hoppscotch-sh-admin (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in google-fonts-to-wordpress-collection (npm)
1 compromised version
- Feb 3, 2025
Malicious code in githubpagessites (npm)
1 compromised version
- Feb 3, 2025
Malicious code in geronimopkgv2 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in geronimopkg (npm)
1 compromised version
- Feb 3, 2025
Malicious code in gbc-viewer (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in fixnlhybrid (npm)
1 compromised version
- Feb 3, 2025
Malicious code in expense-management (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in epic-ue-i18n (npm)
1 compromised version
- Feb 3, 2025
Malicious code in epic-ue-darkly (npm)
1 compromised version
- Feb 3, 2025
Malicious code in elgato-webhid-jaas-demo (npm)
1 compromised version
- Feb 3, 2025
Malicious code in discord.js-dmall-friends-v11 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in dgxeon-sokets (npm)
1 compromised version
- Feb 3, 2025
Malicious code in dependency-confusion-poc-ay (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in deneme-renklerim (npm)
1 compromised version
- Feb 3, 2025
Malicious code in dealer-portal (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in cx-logger-library (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in command-plugins (npm)
1 compromised version
- Feb 3, 2025
Malicious code in cokiee-test (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in check-slip-chii (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in cdc-chatbot (npm)
1 compromised version
- Feb 3, 2025
Malicious code in cassadasdasdasdwad (npm)
1 compromised version
- Feb 3, 2025
Malicious code in buildaurora (npm)
1 compromised version
- Feb 3, 2025
Malicious code in build-test-utilities (npm)
1 compromised version
Page 5986 of 6,647