Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Dec 9, 2024
Malicious code in public-api-signature-calculator-example (npm)
1 compromised version
- Dec 9, 2024
Malicious code in proxyapi-docs (npm)
11 compromised versions
- Dec 9, 2024
Malicious code in programupdater (npm)
1 compromised version
- Dec 9, 2024
Malicious code in programcleanup (npm)
1 compromised version
- Dec 9, 2024
Malicious code in product-documentation (npm)
1 compromised version
- Dec 9, 2024
Malicious code in prismjs-editor-v1 (npm)
1 compromised version
- Dec 9, 2024
Malicious code in powerupdate (npm)
1 compromised version
- Dec 9, 2024
Malicious code in plugin-compiler-bytedance (npm)
1 compromised version
- Dec 9, 2024
Malicious code in platform-api-test-framework (npm)
1 compromised version
- Dec 9, 2024
Malicious code in permissionscaling (npm)
1 compromised version
- Dec 9, 2024
Malicious code in peritter (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in perfetto-dev (npm)
4 compromised versions
- Dec 9, 2024
Malicious code in pagegraph-crawl (npm)
1 compromised version
- Dec 9, 2024
Malicious code in oss-feature-flags (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in ory-docs (npm)
1 compromised version
- Dec 9, 2024
Malicious code in orderly-evm-crosschain (npm)
1 compromised version
- Dec 9, 2024
Malicious code in oneui-angular (npm)
1 compromised version
- Dec 9, 2024
Malicious code in omahaoffice (npm)
1 compromised version
- Dec 9, 2024
Malicious code in old-package-name (npm)
1 compromised version
- Dec 9, 2024
Malicious code in odistube (npm)
4 compromised versions
- Dec 9, 2024
Malicious code in nodes-polyfill-webpack-plugin (npm)
1 compromised version
- Dec 9, 2024
Malicious code in node-polyfill-webpack-plugins (npm)
1 compromised version
- Dec 9, 2024
Malicious code in nf-tvui-spriter (npm)
1 compromised version
- Dec 9, 2024
Malicious code in nf-ase (npm)
1 compromised version
- Dec 9, 2024
Malicious code in nezur (npm)
1 compromised version
- Dec 9, 2024
Malicious code in ne-captcha (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-speedy-components (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-shared (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-service-target-web (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-service-target-mini (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-service-target-lynx (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-service-commands (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-plugin-events (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-max (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-manager-plugins-shared (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-manager (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-client-web (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-client-plugin (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mona-client-max (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mkh-responsive (npm)
30 compromised versions
- Dec 9, 2024
Malicious code in minife_node (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mina-wasm-mvp (npm)
1 compromised version
- Dec 9, 2024
Malicious code in mhn-malicious1 (npm)
1 compromised version
- Dec 9, 2024
Malicious code in metamask-extension-generate-attributions (npm)
3 compromised versions
- Dec 9, 2024
Malicious code in message-template-app (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in material-ui-codemod (npm)
3 compromised versions
- Dec 9, 2024
Malicious code in manoj-task-addons (npm)
1 compromised version
- Dec 9, 2024
Malicious code in maker-governance-dashboard-server (npm)
1 compromised version
- Dec 9, 2024
Malicious code in magicmicroservices (npm)
1 compromised version
- Dec 9, 2024
Malicious code in lvbypasser (npm)
1 compromised version
Page 6034 of 6,647