Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,265 total in npm · sorted newest first- Jan 13, 2025
Malicious code in parseq-tracevis (npm)
2 compromised versions
- Jan 13, 2025
Malicious code in bigcommerce-cornerstone (npm)
3 compromised versions
- Jan 13, 2025
Malicious code in vscode-gestalt (npm)
1 compromised version
- Jan 13, 2025
Malicious code in gatsby-hampton-theme (npm)
1 compromised version
- Jan 13, 2025
Malicious code in build-stuff (npm)
1 compromised version
- Jan 13, 2025
Malicious code in mlb-site-core (npm)
4 compromised versions
- Jan 13, 2025
Malicious code in jiolocate-ui (npm)
1 compromised version
- Jan 13, 2025
Malicious code in romanes-eunt-domus-jd-1337 (npm)
15 compromised versions
- Jan 12, 2025
Malicious code in marked-ps (npm)
8 compromised versions
- Jan 12, 2025
Malicious code in marked-cs (npm)
13 compromised versions
- Jan 10, 2025
Malicious code in dexscreener (npm)
- Jan 10, 2025
Malware in dexscreener
1 compromised version
- Jan 10, 2025
Malicious code in solana-transaction-toolkit (npm)
- Jan 10, 2025
Malicious code in solana-stable-web-huks (npm)
- Jan 10, 2025
Malware in solana-stable-web-huks
1 compromised version
- Jan 10, 2025
Malware in solana-transaction-toolkit
1 compromised version
- Jan 10, 2025
Malicious code in secure-toolkits (npm)
1 compromised version
- Jan 9, 2025
Malicious code in hardhat-dotenv (npm)
2 compromised versions
- Jan 8, 2025
Malicious code in alchemy-web3-webpack-example (npm)
1 compromised version
- Jan 8, 2025
Malicious code in shopify-ecommerce-shopping-cart (npm)
1 compromised version
- Jan 8, 2025
Malicious code in digitalexp-lowcode-runner-app (npm)
1 compromised version
- Jan 8, 2025
Malicious code in @shadowbyte/checkout-telemetry-agent (npm)
1 compromised version
- Jan 8, 2025
Malicious code in kiota-typescript (npm)
1 compromised version
- Jan 8, 2025
Malicious code in keeper-secrets-manager (npm)
3 compromised versions
- Jan 8, 2025
Malicious code in jupyter-binding (npm)
1 compromised version
- Jan 8, 2025
Malicious code in electron-wix-msi-local (npm)
1 compromised version
- Jan 8, 2025
Malicious code in aem-guides-wknd-app (npm)
1 compromised version
- Jan 7, 2025
Malicious code in pre-commit-tasks (npm)
1 compromised version
- Jan 7, 2025
Malicious code in hts-open-dex-react-ui (npm)
1 compromised version
- Jan 7, 2025
Malicious code in innocent-package (npm)
1 compromised version
- Jan 7, 2025
Malicious code in cursor-shadow-workspace (npm)
2 compromised versions
- Jan 7, 2025
Malicious code in cursor-always-local (npm)
1 compromised version
- Jan 7, 2025
Malicious code in cursor-retrieval (npm)
2 compromised versions
- Jan 7, 2025
Malicious code in jpl-branding (npm)
4 compromised versions
- Jan 7, 2025
Malicious code in @patternfly-v5/patternfly (npm)
3 compromised versions
- Jan 7, 2025
Malicious code in ecpfs-react-jest-helpers (npm)
1 compromised version
- Jan 7, 2025
Malicious code in electron-builder-13 (npm)
3 compromised versions
- Jan 6, 2025
Malicious code in zetessf (npm)
1 compromised version
- Jan 6, 2025
Malicious code in @vf-org/smapi-js-core (npm)
10 compromised versions
- Jan 6, 2025
Malicious code in tree-sitter-strings (npm)
1 compromised version
- Jan 6, 2025
Malicious code in walletcore-gen (npm)
1 compromised version
- Jan 6, 2025
Malicious code in solanacore (npm)
5 compromised versions
- Jan 6, 2025
Malicious code in tt4b (npm)
3 compromised versions
- Jan 6, 2025
Malicious code in hd-base (npm)
1 compromised version
- Jan 6, 2025
Malicious code in nativescript-gainsight-px2 (npm)
1 compromised version
- Jan 5, 2025
Malicious code in old-mpl-token-metadata (npm)
1 compromised version
- Jan 5, 2025
Malicious code in express-v4 (npm)
1 compromised version
- Jan 5, 2025
Malicious code in eslint-config-proton-lint (npm)
1 compromised version
- Jan 5, 2025
Malicious code in appboy-web-sdk-v2 (npm)
1 compromised version
- Jan 4, 2025
Malicious code in api-demo-sample-lib4 (npm)
2 compromised versions
Page 6015 of 6,646