Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Feb 3, 2025
Malicious code in ethchained (npm)
- Feb 3, 2025
Malware in ethchained
1 compromised version
- Feb 3, 2025
Malware in ethweb-set
1 compromised version
- Feb 3, 2025
Malware in fast-utilz
1 compromised version
- Feb 3, 2025
Malicious code in legacy_fbid (npm)
1 compromised version
- Feb 3, 2025
Malicious code in experimenter-docs (npm)
1 compromised version
- Feb 3, 2025
Malware in legacy_fbid
1 compromised version
- Feb 3, 2025
Malware in forcechatter
1 compromised version
- Feb 3, 2025
Malware in semantic-release-dependencies
1 compromised version
- Feb 3, 2025
Malware in experimenter-docs
1 compromised version
- Feb 3, 2025
Malware in swisscom-scaleio
1 compromised version
- Feb 3, 2025
Malware in create-shopify-web-app
1 compromised version
- Feb 3, 2025
Malware in 4m-clean-shopify-app
1 compromised version
- Feb 3, 2025
Malicious code in socketdinacom (npm)
- Feb 3, 2025
Malicious code in setan (npm)
- Feb 3, 2025
Malicious code in hantu (npm)
- Feb 3, 2025
Malicious code in dinacomgraph (npm)
- Feb 3, 2025
Malware in socketdinacom
1 compromised version
- Feb 3, 2025
Malware in setan
1 compromised version
- Feb 3, 2025
Malware in hantu
1 compromised version
- Feb 3, 2025
Malware in dinacomgraph
1 compromised version
- Feb 3, 2025
Malware in actiris
1 compromised version
- Feb 3, 2025
Malware in hotmart
1 compromised version
- Feb 3, 2025
Malicious code in ing-feat-inbox (npm)
2 compromised versions
- Feb 3, 2025
Malware in ing-feat-inbox
1 compromised version
- Feb 3, 2025
Malicious code in argus3-test (npm)
14 compromised versions
- Feb 3, 2025
Malware in argus3-test
1 compromised version
- Feb 3, 2025
Malicious code in paytm-blink-checkout-vue3-example (npm)
1 compromised version
- Feb 3, 2025
Malicious code in paytm-blink-checkout-vue2-example (npm)
1 compromised version
- Feb 3, 2025
Malicious code in model-viewer-render-fidelity-tools (npm)
1 compromised version
- Feb 3, 2025
Malicious code in deferred-example (npm)
1 compromised version
- Feb 3, 2025
Malware in model-viewer-render-fidelity-tools
1 compromised version
- Feb 3, 2025
Malware in built-with-workers
1 compromised version
- Feb 3, 2025
Malware in paytm-blink-checkout-vue3-example
1 compromised version
- Feb 3, 2025
Malware in deferred-example
1 compromised version
- Feb 3, 2025
Malware in paytm-blink-checkout-vue2-example
1 compromised version
- Feb 3, 2025
Malware in hardhat-dotenv
1 compromised version
- Feb 3, 2025
Malicious code in truelayer-for-woocommerce (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in launchpad-design-system (npm)
- Feb 3, 2025
Malicious code in jetpack-boost (npm)
- Feb 3, 2025
Malicious code in hakana-vscode-plugin (npm)
- Feb 3, 2025
Malicious code in gateway-hsm-sample (npm)
- Feb 3, 2025
Malicious code in core-exchange-spec (npm)
- Feb 3, 2025
Malicious code in climate-tokenization-engine-ui (npm)
- Feb 3, 2025
Malicious code in chialisp-lsp-runner (npm)
- Feb 3, 2025
Malicious code in auth0-logs-to-datadog (npm)
- Feb 3, 2025
Malicious code in aptos-cctp (npm)
- Feb 3, 2025
Malicious code in action-doctl (npm)
- Feb 3, 2025
Malware in launchpad-design-system
1 compromised version
- Feb 3, 2025
Malware in gateway-hsm-sample
1 compromised version
Page 5994 of 6,647