Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Feb 3, 2025
Malware in auth0-langchain-rag-js
1 compromised version
- Feb 3, 2025
Malware in hire-task
1 compromised version
- Feb 3, 2025
Malware in pegin-address-verificator
1 compromised version
- Feb 3, 2025
Malware in dna-mbc
1 compromised version
- Feb 3, 2025
Malware in metamask-sdk-monorepo
1 compromised version
- Feb 3, 2025
Malware in check-release-dependencies
1 compromised version
- Feb 3, 2025
Malware in traceviz-angular-trace
1 compromised version
- Feb 3, 2025
Malware in node_package_runner
1 compromised version
- Feb 3, 2025
Malware in money-market
1 compromised version
- Feb 3, 2025
Malware in gateway-eth-ts
1 compromised version
- Feb 3, 2025
Malware in nord-security-task
1 compromised version
- Feb 3, 2025
Malware in common-test-utils
1 compromised version
- Feb 3, 2025
Malware in eslint-v9
1 compromised version
- Feb 3, 2025
Malware in no-style-dependency
1 compromised version
- Feb 3, 2025
Malware in showcase-server
1 compromised version
- Feb 3, 2025
Malware in eslint-config-scality
1 compromised version
- Feb 3, 2025
Malware in old-celo-base
1 compromised version
- Feb 3, 2025
Malicious code in base-encryption (npm)
1 compromised version
- Feb 3, 2025
Malware in base-encryption
1 compromised version
- Feb 3, 2025
Malware in tr46mine
1 compromised version
- Feb 3, 2025
Malware in extendmine
1 compromised version
- Feb 3, 2025
Malware in secure-toolbots
1 compromised version
- Feb 3, 2025
Malicious code in twenty7tec_client (npm)
1 compromised version
- Feb 3, 2025
Malicious code in lead-marketing-metadata (npm)
1 compromised version
- Feb 3, 2025
Malware in lead-marketing-metadata
1 compromised version
- Feb 3, 2025
Malware in twenty7tec_client
1 compromised version
- Feb 3, 2025
Malicious code in tssinternaldev (npm)
2 compromised versions
- Feb 3, 2025
Malware in tssinternaldev
1 compromised version
- Feb 3, 2025
Malicious code in dvpawebwidgetsdetailspageclient (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in update_image_asset (npm)
1 compromised version
- Feb 3, 2025
Malicious code in packeage (npm)
1 compromised version
- Feb 3, 2025
Malicious code in combine_assets_store (npm)
1 compromised version
- Feb 3, 2025
Malicious code in com.liferay.wiki.web (npm)
1 compromised version
- Feb 3, 2025
Malware in scuntest
1 compromised version
- Feb 3, 2025
Malware in combine_assets_store
1 compromised version
- Feb 3, 2025
Malware in react-native-country-picker-modal-modified
1 compromised version
- Feb 3, 2025
Malware in testpacke
1 compromised version
- Feb 3, 2025
Malware in elabasia-mobileapp-react-native-ui
1 compromised version
- Feb 3, 2025
Malware in update_image_asset
1 compromised version
- Feb 3, 2025
Malware in com.liferay.wiki.web
1 compromised version
- Feb 3, 2025
Malware in classic-theme
1 compromised version
- Feb 3, 2025
Malware in packeage
1 compromised version
- Feb 3, 2025
Malware in dvpawebwidgetsdetailspageclient
1 compromised version
- Feb 3, 2025
Malicious code in vue-plugin-rely-cs (npm)
- Feb 3, 2025
Malicious code in csvue-unplugin (npm)
- Feb 3, 2025
Malicious code in csquill-vue3 (npm)
- Feb 3, 2025
Malicious code in csmagnifier-vue3 (npm)
- Feb 3, 2025
Malicious code in cscvue-unplugin (npm)
- Feb 3, 2025
Malicious code in cscropper-vue32 (npm)
- Feb 3, 2025
Malicious code in cscropper-vue3 (npm)
Page 5992 of 6,647