Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Feb 3, 2025
Malicious code in @douinfe/semi-d2c-typings (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @douinfe/semi-animation-styled (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @bughunter_99/webpack-demo-2 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @alaska-its/design-tokens (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @al-ui/useappinsights (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in @aftersale/react-eva (npm)
1 compromised version
- Feb 3, 2025
Malicious code in zapier-shops-orders (npm)
- Feb 3, 2025
Malicious code in webhook-example-coinbase-commerce-node (npm)
- Feb 3, 2025
Malicious code in web3-onboard-sandbox (npm)
- Feb 3, 2025
Malicious code in type-on-strap (npm)
- Feb 3, 2025
Malicious code in ton-payment-channels-example (npm)
- Feb 3, 2025
Malicious code in ton-examples (npm)
- Feb 3, 2025
Malicious code in solana-graphql-playground (npm)
- Feb 3, 2025
Malicious code in sol-wallet-adapter-example (npm)
- Feb 3, 2025
Malicious code in pyre2 (npm)
- Feb 3, 2025
Malicious code in ppcp-starter-node (npm)
- Feb 3, 2025
Malicious code in paypal-react-donation (npm)
- Feb 3, 2025
Malicious code in paypal-js-advanced-integration-ib (npm)
- Feb 3, 2025
Malicious code in navigation-blocking (npm)
- Feb 3, 2025
Malicious code in moonpay-websdk-buy (npm)
- Feb 3, 2025
Malicious code in link_paidy (npm)
- Feb 3, 2025
Malicious code in lge-example (npm)
- Feb 3, 2025
Malicious code in lazy-loading-router-provider (npm)
- Feb 3, 2025
Malicious code in l10nmessages-website (npm)
- Feb 3, 2025
Malicious code in ib-ai-react (npm)
- Feb 3, 2025
Malicious code in firehose-poc-client (npm)
- Feb 3, 2025
Malicious code in fastlane_paypal_video_project (npm)
- Feb 3, 2025
Malicious code in facebook-pixel-wordpress-js-lib (npm)
- Feb 3, 2025
Malicious code in etched-oracle (npm)
- Feb 3, 2025
Malicious code in deep-links-movie-tutorial (npm)
- Feb 3, 2025
Malicious code in custom-query-parse-serialization (npm)
- Feb 3, 2025
Malicious code in custom-filter-link (npm)
- Feb 3, 2025
Malicious code in cpp-jwt (npm)
- Feb 3, 2025
Malware in custom-query-parse-serialization
1 compromised version
- Feb 3, 2025
Malware in fastlane_paypal_video_project
1 compromised version
- Feb 3, 2025
Malware in deep-links-movie-tutorial
1 compromised version
- Feb 3, 2025
Malware in etched-oracle
1 compromised version
- Feb 3, 2025
Malware in zapier-shops-orders
1 compromised version
- Feb 3, 2025
Malware in lge-example
1 compromised version
- Feb 3, 2025
Malware in ton-payment-channels-example
1 compromised version
- Feb 3, 2025
Malware in ib-ai-react
1 compromised version
- Feb 3, 2025
Malware in paypal-js-advanced-integration-ib
1 compromised version
- Feb 3, 2025
Malware in link_paidy
1 compromised version
- Feb 3, 2025
Malware in firehose-poc-client
1 compromised version
- Feb 3, 2025
Malware in sol-wallet-adapter-example
1 compromised version
- Feb 3, 2025
Malware in webhook-example-coinbase-commerce-node
1 compromised version
- Feb 3, 2025
Malware in cpp-jwt
1 compromised version
- Feb 3, 2025
Malware in ppcp-starter-node
1 compromised version
- Feb 3, 2025
Malware in ton-examples
1 compromised version
- Feb 3, 2025
Malware in l10nmessages-website
1 compromised version
Page 5988 of 6,647