Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Feb 3, 2025
Malware in climate-tokenization-engine-ui
1 compromised version
- Feb 3, 2025
Malware in truelayer-for-woocommerce
1 compromised version
- Feb 3, 2025
Malware in aptos-cctp
1 compromised version
- Feb 3, 2025
Malware in action-doctl
1 compromised version
- Feb 3, 2025
Malware in jetpack-boost
1 compromised version
- Feb 3, 2025
Malware in chialisp-lsp-runner
1 compromised version
- Feb 3, 2025
Malware in core-exchange-spec
1 compromised version
- Feb 3, 2025
Malware in auth0-logs-to-datadog
1 compromised version
- Feb 3, 2025
Malware in hakana-vscode-plugin
1 compromised version
- Feb 3, 2025
Malicious code in world-id-cloud-template (npm)
- Feb 3, 2025
Malicious code in tinyquickstartreactnative (npm)
- Feb 3, 2025
Malware in tinyquickstartreactnative
1 compromised version
- Feb 3, 2025
Malware in world-id-cloud-template
1 compromised version
- Feb 3, 2025
Malicious code in pulumi-automation-sdk-ssh-tunnel (npm)
1 compromised version
- Feb 3, 2025
Malware in pulumi-automation-sdk-ssh-tunnel
1 compromised version
- Feb 3, 2025
Malicious code in sg_personal_ui (npm)
1 compromised version
- Feb 3, 2025
Malware in sg_personal_ui
1 compromised version
- Feb 3, 2025
Malicious code in type-fs-extra (npm)
13 compromised versions
- Feb 3, 2025
Malware in type-fs-extra
1 compromised version
- Feb 3, 2025
Malicious code in sendinblue2019 (npm)
3 compromised versions
- Feb 3, 2025
Malware in sendinblue2019
1 compromised version
- Feb 1, 2025
Malicious code in sigma-payment (npm)
1 compromised version
- Feb 1, 2025
Malicious code in hotmart (npm)
1 compromised version
- Feb 1, 2025
Malicious code in actiris (npm)
1 compromised version
- Jan 31, 2025
Malicious code in is-number-ctf (npm)
4 compromised versions
- Jan 31, 2025
Malicious code in victory-native-xl-monorepo (npm)
3 compromised versions
- Jan 31, 2025
Malicious code in dummy-loosesight-gd (npm)
1 compromised version
- Jan 31, 2025
Malicious code in turbolinks_jwt_test2 (npm)
1 compromised version
- Jan 31, 2025
Malicious code in unitedrabbits (npm)
5 compromised versions
- Jan 31, 2025
Malicious code in ua.unitedforbusiness.frontend (npm)
3 compromised versions
- Jan 31, 2025
Malicious code in tittottit (npm)
1 compromised version
- Jan 31, 2025
Malicious code in testingthesand (npm)
1 compromised version
- Jan 31, 2025
Malicious code in skulldentist (npm)
2 compromised versions
- Jan 31, 2025
Malicious code in react-native-country-picker-modal-modified (npm)
1 compromised version
- Jan 31, 2025
Malicious code in prajwal_kewat-test-package (npm)
1 compromised version
- Jan 31, 2025
Malicious code in offer-ui-tools (npm)
1 compromised version
- Jan 31, 2025
Malicious code in nodejs-paypal-checkout-demo (npm)
4 compromised versions
- Jan 31, 2025
Malicious code in jqtools-overlay (npm)
1 compromised version
- Jan 31, 2025
Malicious code in isctf5 (npm)
1 compromised version
- Jan 31, 2025
Malicious code in isctf4 (npm)
1 compromised version
- Jan 31, 2025
Malicious code in isctf3 (npm)
1 compromised version
- Jan 31, 2025
Malicious code in isctf2 (npm)
1 compromised version
- Jan 31, 2025
Malicious code in isctf17 (npm)
1 compromised version
- Jan 31, 2025
Malicious code in isctf16 (npm)
1 compromised version
- Jan 31, 2025
Malicious code in isctf11 (npm)
1 compromised version
- Jan 31, 2025
Malicious code in herostereo (npm)
3 compromised versions
- Jan 31, 2025
Malicious code in gitgotgottten (npm)
2 compromised versions
- Jan 31, 2025
Malicious code in finfonfon (npm)
1 compromised version
- Jan 31, 2025
Malicious code in elabasia-mobileapp-react-native-ui (npm)
4 compromised versions
- Jan 31, 2025
Malicious code in abha (npm)
1 compromised version
Page 5995 of 6,647