Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Feb 3, 2025
Malware in flux-example-chat
1 compromised version
- Feb 3, 2025
Malware in ontology-starter-react-app
1 compromised version
- Feb 3, 2025
Malware in mpl-token-metadata
1 compromised version
- Feb 3, 2025
Malware in alex_cloud
1 compromised version
- Feb 3, 2025
Malware in arrayref
1 compromised version
- Feb 3, 2025
Malicious code in worldcoin-grants-contracts (npm)
- Feb 3, 2025
Malicious code in whatsapp-otp-sample-server (npm)
- Feb 3, 2025
Malicious code in trading-frontend-demo (npm)
- Feb 3, 2025
Malicious code in sample-nodejs-vsk-with-adm (npm)
- Feb 3, 2025
Malicious code in puppetlabs-apt (npm)
- Feb 3, 2025
Malicious code in pkl.tmbundle (npm)
- Feb 3, 2025
Malicious code in perfolizer (npm)
- Feb 3, 2025
Malicious code in onchain-summer (npm)
- Feb 3, 2025
Malicious code in net8.0 (npm)
- Feb 3, 2025
Malicious code in microsoft-authentication-libraries-for-js (npm)
- Feb 3, 2025
Malicious code in kiosk-demo (npm)
- Feb 3, 2025
Malicious code in images.pages.dev (npm)
- Feb 3, 2025
Malicious code in grunt-contrib-coffe (npm)
- Feb 3, 2025
Malicious code in flow-templates (npm)
- Feb 3, 2025
Malicious code in deric-mesos (npm)
- Feb 3, 2025
Malicious code in custom-sign-in (npm)
- Feb 3, 2025
Malicious code in browser-sign-in (npm)
- Feb 3, 2025
Malicious code in axelar-presets (npm)
- Feb 3, 2025
Malicious code in alpha-launcher (npm)
- Feb 3, 2025
Malicious code in alex_v1 (npm)
- Feb 3, 2025
Malware in puppetlabs-apt
1 compromised version
- Feb 3, 2025
Malware in custom-sign-in
1 compromised version
- Feb 3, 2025
Malware in perfolizer
1 compromised version
- Feb 3, 2025
Malware in grunt-contrib-coffe
1 compromised version
- Feb 3, 2025
Malware in browser-sign-in
1 compromised version
- Feb 3, 2025
Malware in net8.0
1 compromised version
- Feb 3, 2025
Malware in images.pages.dev
1 compromised version
- Feb 3, 2025
Malware in alpha-launcher
1 compromised version
- Feb 3, 2025
Malware in flow-templates
1 compromised version
- Feb 3, 2025
Malware in npm-website-example
1 compromised version
- Feb 3, 2025
Malware in deric-mesos
1 compromised version
- Feb 3, 2025
Malware in com.unity.ai.navigation
1 compromised version
- Feb 3, 2025
Malware in smartling-openapi-spec
1 compromised version
- Feb 3, 2025
Malware in axelar-presets
1 compromised version
- Feb 3, 2025
Malware in nlohmann-json
1 compromised version
- Feb 3, 2025
Malware in magic-enum
1 compromised version
- Feb 3, 2025
Malware in trading-frontend-demo
1 compromised version
- Feb 3, 2025
Malware in microsoft-authentication-libraries-for-js
1 compromised version
- Feb 3, 2025
Malware in worldcoin-grants-contracts
1 compromised version
- Feb 3, 2025
Malware in sample-nodejs-vsk-with-adm
1 compromised version
- Feb 3, 2025
Malware in onchain-summer
1 compromised version
- Feb 3, 2025
Malware in pkl.tmbundle
1 compromised version
- Feb 3, 2025
Malware in whatsapp-otp-sample-server
1 compromised version
- Feb 3, 2025
Malware in kiosk-demo
1 compromised version
- Feb 3, 2025
Malware in alex_v1
1 compromised version
Page 5990 of 6,647