Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Feb 3, 2025
Malicious code in bootstrapper-solara (npm)
1 compromised version
- Feb 3, 2025
Malicious code in blockly-examples (npm)
1 compromised version
- Feb 3, 2025
Malicious code in bengececipaketimdebu (npm)
1 compromised version
- Feb 3, 2025
Malicious code in bar_lib (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in baileys-dgxeon (npm)
1 compromised version
- Feb 3, 2025
Malicious code in aurorabuilder (npm)
1 compromised version
- Feb 3, 2025
Malicious code in anton-downloader (npm)
1 compromised version
- Feb 3, 2025
Malicious code in analytics-search (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in analytics-passive-tracker (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in analytics-omniture-constants (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in analytics-merge-beacons (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in analytics-end-of-page (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in analytics-bp-passive-tracker-loader (npm)
6 compromised versions
- Feb 3, 2025
Malicious code in analytics-biscuit-tin (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in akamai-edgeworkers-cli (npm)
1 compromised version
- Feb 3, 2025
Malicious code in airflow-www (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in adobe-dcapi-web2 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in adobe-dcapi-web (npm)
5 compromised versions
- Feb 3, 2025
Malicious code in addons-pm (npm)
1 compromised version
- Feb 3, 2025
Malicious code in ad_language_monitor_appscript (npm)
1 compromised version
- Feb 3, 2025
Malicious code in aaaa89852889 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @wfps/wfps-common-lib (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in @volcenjine/veplayer (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @volcenjine/vegame (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @vk-tech-solar/config (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in @twork-mw/display-mode (npm)
50 compromised versions
- Feb 3, 2025
Malicious code in @tui-react-mobile/app-bar (npm)
50 compromised versions
- Feb 3, 2025
Malicious code in @transmit-security/rbac (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @toloka-annotation-studio/app (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @test6uy767/back-end (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @sn4k-s3c/call-home (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @smt-front/analytics (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @sanchezcoding/fetchs (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in @persona-builder/client (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @orange-team/map-rank-tracker-frontend (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @mrpudidi/gravatar (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in @metrics-service/static (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in @marfeel/eslint-config-node (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @infoserver/gov-shared-connections (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @im-dims/bail (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @haysee/v5.2 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @goodsoftware/analytics-for-confluence-client (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @epic-ecp/types (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @electra-web/settings-menu (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @electra-web/common (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @electra-web/bitrate-switcher (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @douinfe/semi-theme-default (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @douinfe/semi-illustrations (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @douinfe/semi-icons (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @douinfe/semi-foundation (npm)
1 compromised version
Page 5987 of 6,647