Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Feb 3, 2025
Malicious code in uniform-reliable-broadcast (npm)
- Feb 3, 2025
Malicious code in paypal-standard-integration-react-ib (npm)
- Feb 3, 2025
Malicious code in paypal-standard-integration (npm)
- Feb 3, 2025
Malicious code in paypal-server-sdk (npm)
- Feb 3, 2025
Malicious code in paypal-googlepay-advanced-integration (npm)
- Feb 3, 2025
Malicious code in node-terminal-contracts (npm)
- Feb 3, 2025
Malicious code in k6-es6 (npm)
- Feb 3, 2025
Malicious code in hiero-sdk-cpp (npm)
- Feb 3, 2025
Malicious code in facebook-pixel-for-wordpress (npm)
- Feb 3, 2025
Malicious code in ethereum-node-crawler (npm)
- Feb 3, 2025
Malicious code in developer-hub (npm)
- Feb 3, 2025
Malicious code in deribit-arbitrage-monitor (npm)
1 compromised version
- Feb 3, 2025
Malicious code in checksums (npm)
- Feb 3, 2025
Malicious code in checkout_sample (npm)
- Feb 3, 2025
Malicious code in anyswappoc (npm)
- Feb 3, 2025
Malware in k6-learn
1 compromised version
- Feb 3, 2025
Malware in k6-es6
1 compromised version
- Feb 3, 2025
Malware in hiero-sdk-cpp
1 compromised version
- Feb 3, 2025
Malware in checkout_sample
1 compromised version
- Feb 3, 2025
Malware in overture2osmjs
1 compromised version
- Feb 3, 2025
Malware in ember-nf-graph-examples
1 compromised version
- Feb 3, 2025
Malware in uniform-reliable-broadcast
1 compromised version
- Feb 3, 2025
Malware in paypal-standard-integration
1 compromised version
- Feb 3, 2025
Malware in vite-paypal
1 compromised version
- Feb 3, 2025
Malware in tomcrypt
1 compromised version
- Feb 3, 2025
Malware in ethereum-node-crawler
1 compromised version
- Feb 3, 2025
Malware in delete-deployments
1 compromised version
- Feb 3, 2025
Malware in intel-enterprise-rag-ui
1 compromised version
- Feb 3, 2025
Malware in paypal-server-sdk
1 compromised version
- Feb 3, 2025
Malware in bindbc-loader
1 compromised version
- Feb 3, 2025
Malware in anyswappoc
1 compromised version
- Feb 3, 2025
Malware in facebook-pixel-for-wordpress
1 compromised version
- Feb 3, 2025
Malware in developer-hub
1 compromised version
- Feb 3, 2025
Malware in paypal-googlepay-advanced-integration
1 compromised version
- Feb 3, 2025
Malware in monaco-npm
1 compromised version
- Feb 3, 2025
Malware in lldb-dap
1 compromised version
- Feb 3, 2025
Malware in deribit-arbitrage-monitor
1 compromised version
- Feb 3, 2025
Malware in browser-nextjs
1 compromised version
- Feb 3, 2025
Malware in paypal-standard-integration-react-ib
1 compromised version
- Feb 3, 2025
Malware in css-blocks-monorepo
1 compromised version
- Feb 3, 2025
Malware in node-terminal-contracts
1 compromised version
- Feb 3, 2025
Malware in checksums
1 compromised version
- Feb 3, 2025
Malicious code in traceviz-angular-trace (npm)
- Feb 3, 2025
Malicious code in metamask-sdk-monorepo (npm)
- Feb 3, 2025
Malicious code in hire-task (npm)
- Feb 3, 2025
Malicious code in dna-mbc (npm)
1 compromised version
- Feb 3, 2025
Malware in types-safety-web
1 compromised version
- Feb 3, 2025
Malware in compiler-version
1 compromised version
- Feb 3, 2025
Malware in addon-sdk
1 compromised version
- Feb 3, 2025
Malware in test_package_file
1 compromised version
Page 5991 of 6,647