Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Jan 30, 2025
Malicious code in npm_linux (npm)
1 compromised version
- Jan 30, 2025
Malicious code in node_package_runner (npm)
3 compromised versions
- Jan 30, 2025
Malicious code in move-binary-format-wasm (npm)
2 compromised versions
- Jan 30, 2025
Malicious code in money-market (npm)
1 compromised version
- Jan 30, 2025
Malicious code in media_kit_native_event_loop (npm)
1 compromised version
- Jan 30, 2025
Malicious code in lightbeam-we (npm)
1 compromised version
- Jan 30, 2025
Malicious code in launchpad-ui (npm)
1 compromised version
- Jan 30, 2025
Malicious code in kibana-release-notes (npm)
1 compromised version
- Jan 30, 2025
Malicious code in jaeger-ui (npm)
1 compromised version
- Jan 30, 2025
Malicious code in interview-code-challenge-full-stack (npm)
1 compromised version
- Jan 30, 2025
Malicious code in incomesample (npm)
1 compromised version
- Jan 30, 2025
Malicious code in grabathon-5.0 (npm)
1 compromised version
- Jan 30, 2025
Malicious code in google.kythe (npm)
1 compromised version
- Jan 30, 2025
Malicious code in gcp-scanner-visualizer (npm)
2 compromised versions
- Jan 30, 2025
Malicious code in gatsby-eui-starter (npm)
1 compromised version
- Jan 30, 2025
Malicious code in gateway-eth-ts (npm)
2 compromised versions
- Jan 30, 2025
Malicious code in fury-core-action (npm)
2 compromised versions
- Jan 30, 2025
Malicious code in flight_lab_control (npm)
1 compromised version
- Jan 30, 2025
Malicious code in flashcards-sdk-converter (npm)
1 compromised version
- Jan 30, 2025
Malicious code in firefoxcolor (npm)
1 compromised version
- Jan 30, 2025
Malicious code in fabric-shim-docs (npm)
1 compromised version
- Jan 30, 2025
Malicious code in example-yarn (npm)
1 compromised version
- Jan 30, 2025
Malicious code in example-app-node (npm)
1 compromised version
- Jan 30, 2025
Malicious code in eslint-v9 (npm)
1 compromised version
- Jan 30, 2025
Malicious code in emergency-pull-request-probot-app (npm)
1 compromised version
- Jan 30, 2025
Malicious code in ember-super-prosemirror (npm)
1 compromised version
- Jan 30, 2025
Malicious code in educationpurpose (npm)
1 compromised version
- Jan 30, 2025
Malicious code in css-blocks-ember (npm)
1 compromised version
- Jan 30, 2025
Malicious code in controlplane (npm)
1 compromised version
- Jan 30, 2025
Malicious code in cond-common-components (npm)
1 compromised version
- Jan 30, 2025
Malicious code in common-test-utils (npm)
2 compromised versions
- Jan 30, 2025
Malicious code in coinbase-wallet-history-frontend (npm)
1 compromised version
- Jan 30, 2025
Malicious code in cognito_authorizer (npm)
1 compromised version
- Jan 30, 2025
Malicious code in codeql-query (npm)
1 compromised version
- Jan 30, 2025
Malicious code in cli-docs-site (npm)
1 compromised version
- Jan 30, 2025
Malicious code in check-release-dependencies (npm)
2 compromised versions
- Jan 30, 2025
Malicious code in cc-component-lib (npm)
1 compromised version
- Jan 30, 2025
Malicious code in calling-integration-sdk-demo-react-ts (npm)
2 compromised versions
- Jan 30, 2025
Malicious code in bootcamp-hackathon (npm)
1 compromised version
- Jan 30, 2025
Malicious code in backpack-foundations (npm)
1 compromised version
- Jan 30, 2025
Malicious code in auto-claim-service (npm)
2 compromised versions
- Jan 30, 2025
Malicious code in auth0-langchain-rag-js (npm)
1 compromised version
- Jan 30, 2025
Malicious code in alchemy-asset-transfers-benchmark (npm)
1 compromised version
- Jan 30, 2025
Malicious code in admission-server (npm)
1 compromised version
- Jan 30, 2025
Malicious code in addon-sdk (npm)
3 compromised versions
- Jan 30, 2025
Malicious code in @zohaib2121/dtapp (npm)
1 compromised version
- Jan 30, 2025
Malicious code in tree-sitter-hcl (npm)
1 compromised version
- Jan 30, 2025
Malicious code in hardhat-configs (npm)
1 compromised version
- Jan 30, 2025
Malicious code in @nomicsfondation/hardhat-configs (npm)
3 compromised versions
- Jan 30, 2025
Malicious code in telegramclient-utils (npm)
2 compromised versions
Page 5997 of 6,647