Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Jan 7, 2025
Malicious code in electron-builder-13 (npm)
3 compromised versions
- Jan 6, 2025
Malicious code in zetessf (npm)
1 compromised version
- Jan 6, 2025
Malicious code in @vf-org/smapi-js-core (npm)
10 compromised versions
- Jan 6, 2025
Malicious code in tree-sitter-strings (npm)
1 compromised version
- Jan 6, 2025
Malicious code in walletcore-gen (npm)
1 compromised version
- Jan 6, 2025
Malicious code in solanacore (npm)
5 compromised versions
- Jan 6, 2025
Malicious code in tt4b (npm)
3 compromised versions
- Jan 6, 2025
Malicious code in hd-base (npm)
1 compromised version
- Jan 6, 2025
Malicious code in nativescript-gainsight-px2 (npm)
1 compromised version
- Jan 5, 2025
Malicious code in old-mpl-token-metadata (npm)
1 compromised version
- Jan 5, 2025
Malicious code in express-v4 (npm)
1 compromised version
- Jan 5, 2025
Malicious code in eslint-config-proton-lint (npm)
1 compromised version
- Jan 5, 2025
Malicious code in appboy-web-sdk-v2 (npm)
1 compromised version
- Jan 4, 2025
Malicious code in api-demo-sample-lib4 (npm)
2 compromised versions
- Jan 4, 2025
Malicious code in api-demo-sample-lib3 (npm)
1 compromised version
- Jan 4, 2025
Malicious code in @g.genie/api-demo-sample-lib4 (npm)
2 compromised versions
- Jan 3, 2025
Malicious code in webinarwebhookapp (npm)
1 compromised version
- Jan 3, 2025
Malicious code in player-workshop (npm)
1 compromised version
- Jan 3, 2025
Malicious code in muzeeglot (npm)
1 compromised version
- Jan 3, 2025
Malicious code in lambda-demo (npm)
1 compromised version
- Jan 3, 2025
Malicious code in issue-label-notification-action (npm)
1 compromised version
- Jan 3, 2025
Malicious code in firefox-ios (npm)
1 compromised version
- Jan 2, 2025
Malicious code in facetec-browser-sdk (npm)
2 compromised versions
- Jan 2, 2025
Malicious code in zqdl555 (npm)
1 compromised version
- Jan 2, 2025
Malicious code in zqdl333 (npm)
1 compromised version
- Jan 2, 2025
Malicious code in zqdl222 (npm)
1 compromised version
- Jan 2, 2025
Malicious code in zqdl111 (npm)
1 compromised version
- Jan 2, 2025
Malicious code in solana-login (npm)
21 compromised versions
- Jan 2, 2025
Malicious code in ethereumvulncontracthandler (npm)
- Jan 2, 2025
Malware in ethereumvulncontracthandler
1 compromised version
- Jan 2, 2025
Malicious code in create-shopify-web-app (npm)
2 compromised versions
- Jan 2, 2025
Malicious code in swisscom-scaleio (npm)
1 compromised version
- Jan 2, 2025
Malicious code in semantic-release-dependencies (npm)
1 compromised version
- Jan 2, 2025
Malicious code in forcechatter (npm)
1 compromised version
- Jan 2, 2025
Malicious code in treedome (npm)
1 compromised version
- Jan 2, 2025
Malicious code in grr-ui (npm)
2 compromised versions
- Jan 2, 2025
Malicious code in cbpay-js (npm)
1 compromised version
- Jan 2, 2025
Malicious code in lana-docs-site (npm)
3 compromised versions
- Jan 2, 2025
Malicious code in grafana-sentry-datasource (npm)
5 compromised versions
- Jan 2, 2025
Malicious code in safe-react-components (npm)
1 compromised version
- Jan 2, 2025
Malicious code in safe-apps-react-sdk (npm)
1 compromised version
- Jan 2, 2025
Malicious code in payouts-banking-info (npm)
1 compromised version
- Jan 1, 2025
Malicious code in 029testnpm (npm)
1 compromised version
- Jan 1, 2025
Malware in 029testnpm
1 compromised version
- Dec 31, 2024
Malicious code in babel-preset-app (npm)
6 compromised versions
- Dec 31, 2024
Malicious code in valid-package (npm)
1 compromised version
- Dec 31, 2024
Malicious code in fider (npm)
1 compromised version
- Dec 31, 2024
Malicious code in xeno.dll (npm)
1 compromised version
- Dec 31, 2024
Malicious code in solaraexecutor (npm)
4 compromised versions
- Dec 31, 2024
Malicious code in officebrowserfeedback (npm)
1 compromised version
Page 6017 of 6,647