Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Feb 3, 2025
Malware in custom-filter-link
1 compromised version
- Feb 3, 2025
Malware in facebook-pixel-wordpress-js-lib
1 compromised version
- Feb 3, 2025
Malware in paypal-react-donation
1 compromised version
- Feb 3, 2025
Malware in pyre2
1 compromised version
- Feb 3, 2025
Malware in web3-onboard-sandbox
1 compromised version
- Feb 3, 2025
Malware in moonpay-websdk-buy
1 compromised version
- Feb 3, 2025
Malware in solana-graphql-playground
1 compromised version
- Feb 3, 2025
Malware in type-on-strap
1 compromised version
- Feb 3, 2025
Malware in navigation-blocking
1 compromised version
- Feb 3, 2025
Malware in lazy-loading-router-provider
1 compromised version
- Feb 3, 2025
Malware in bootstrap-sass-official
1 compromised version
- Feb 3, 2025
Malicious code in worker-template-postgres (npm)
- Feb 3, 2025
Malicious code in voc-dashboard (npm)
- Feb 3, 2025
Malicious code in twitter-cldr-npm (npm)
- Feb 3, 2025
Malicious code in nft-transfer-transformer (npm)
- Feb 3, 2025
Malicious code in nft-transfer-transforme (npm)
- Feb 3, 2025
Malicious code in lighthousebenchmarks (npm)
- Feb 3, 2025
Malicious code in github-elements (npm)
- Feb 3, 2025
Malicious code in git-scm.com (npm)
- Feb 3, 2025
Malicious code in dbc-wiki (npm)
- Feb 3, 2025
Malicious code in com.unity.subsystemregistration (npm)
- Feb 3, 2025
Malicious code in com.unity.services.core (npm)
- Feb 3, 2025
Malicious code in cloudflare-workers-chatgpt-plugin-example (npm)
- Feb 3, 2025
Malicious code in cache-wranglerjs-binary (npm)
- Feb 3, 2025
Malicious code in cache-dependency-binary (npm)
- Feb 3, 2025
Malicious code in blocto (npm)
- Feb 3, 2025
Malicious code in arrayref (npm)
- Feb 3, 2025
Malicious code in alex_cloud (npm)
- Feb 3, 2025
Malicious code in action-npm-publish (npm)
- Feb 3, 2025
Malware in lighthousebenchmarks
1 compromised version
- Feb 3, 2025
Malware in com.unity.subsystemregistration
1 compromised version
- Feb 3, 2025
Malware in dbc-wiki
1 compromised version
- Feb 3, 2025
Malware in checkmkwebapiclient
1 compromised version
- Feb 3, 2025
Malware in cloudflare-workers-chatgpt-plugin-example
1 compromised version
- Feb 3, 2025
Malware in cache-dependency-binary
1 compromised version
- Feb 3, 2025
Malware in twitter-cldr-npm
1 compromised version
- Feb 3, 2025
Malware in git-scm.com
1 compromised version
- Feb 3, 2025
Malware in blocto
1 compromised version
- Feb 3, 2025
Malware in cache-wranglerjs-binary
1 compromised version
- Feb 3, 2025
Malware in updatelanguagefiles
1 compromised version
- Feb 3, 2025
Malware in worker-template-postgres
1 compromised version
- Feb 3, 2025
Malware in qiot
1 compromised version
- Feb 3, 2025
Malware in github-elements
1 compromised version
- Feb 3, 2025
Malware in com.unity.services.core
1 compromised version
- Feb 3, 2025
Malware in action-npm-publish
1 compromised version
- Feb 3, 2025
Malware in voc-dashboard
1 compromised version
- Feb 3, 2025
Malware in nft-transfer-transforme
1 compromised version
- Feb 3, 2025
Malware in nft-transfer-transformer
1 compromised version
- Feb 3, 2025
Malware in wallet-adapter-demo
1 compromised version
- Feb 3, 2025
Malware in turbolinks_jwt_test2
1 compromised version
Page 5989 of 6,647