Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,218 total in npm · sorted newest first- May 17, 2023
Malicious code in next2ejs (npm)
- May 16, 2023
Malicious code in shitpa (npm)
- May 16, 2023
Malware in shitpa
1 compromised version
- May 16, 2023
Malicious code in ipstringfy (npm)
- May 16, 2023
Malicious code in ipsecurity (npm)
- May 15, 2023
Malicious code in lexicalclipboard (npm)
1 compromised version
- May 15, 2023
Malicious code in lexicaltext (npm)
1 compromised version
- May 15, 2023
Malicious code in lexicalutils (npm)
1 compromised version
- May 15, 2023
Malware in cfa-styleguide
1 compromised version
- May 15, 2023
Malware in flying_pusher
1 compromised version
- May 15, 2023
Malware in maddy_test
1 compromised version
- May 15, 2023
Malware in fotkakukur
1 compromised version
- May 15, 2023
Malicious code in http-resources (npm)
- May 15, 2023
Malicious code in buffer-ex (npm)
- May 15, 2023
Malware in http-resources
1 compromised version
- May 15, 2023
Malware in buffer-ex
1 compromised version
- May 15, 2023
Malware in xml2binary
1 compromised version
- May 15, 2023
Malware in xml2yaml
1 compromised version
- May 15, 2023
Malicious code in yaml2binary (npm)
- May 15, 2023
Malicious code in iputiljs (npm)
- May 15, 2023
Malicious code in ipmacjs (npm)
- May 14, 2023
Malicious code in itfd (npm)
4 compromised versions
- May 14, 2023
Malicious code in fusion-ng-theme (npm)
1 compromised version
- May 14, 2023
Malicious code in fotkakukur (npm)
- May 13, 2023
Malicious code in maddy_test (npm)
1 compromised version
- May 13, 2023
Malicious code in flying_pusher (npm)
- May 13, 2023
Malicious code in cfa-styleguide (npm)
6 compromised versions
- May 12, 2023
Malicious code in ikea-jssdk (npm)
1 compromised version
- May 12, 2023
Malicious code in indoorviewer (npm)
1 compromised version
- May 12, 2023
Malicious code in verycoolzpac2 (npm)
10 compromised versions
- May 12, 2023
Malicious code in verycoolzpac (npm)
16 compromised versions
- May 12, 2023
Malicious code in hyrule-react-commons (npm)
2 compromised versions
- May 12, 2023
Malicious code in innotecsaludo (npm)
1 compromised version
- May 12, 2023
Malicious code in @nokia-csf-uxr/csfwidgets (npm)
- May 12, 2023
Malware in @nokia-csf-uxr/csfwidgets
1 compromised version
- May 12, 2023
Malicious code in xml2yaml (npm)
- May 12, 2023
Malicious code in json2stringfy (npm)
- May 12, 2023
Malicious code in json2double (npm)
- May 11, 2023
Malware in 3a-look
1 compromised version
- May 11, 2023
Malware in 3a-spawn
1 compromised version
- May 11, 2023
Malicious code in xdefi-distribution (npm)
1 compromised version
- May 11, 2023
Malicious code in zalando-tech-radar (npm)
- May 11, 2023
Malware in zalando-tech-radar
1 compromised version
- May 11, 2023
Malicious code in gql2ts-from-schema (npm)
1 compromised version
- May 11, 2023
Malicious code in adityan-pwdd-test (npm)
1 compromised version
- May 11, 2023
Malicious code in wagyu-cli (npm)
- May 11, 2023
Malware in wagyu-cli
1 compromised version
- May 11, 2023
Malicious code in xml2binary (npm)
- May 11, 2023
Malicious code in zmsqlite3 (npm)
2 compromised versions
- May 11, 2023
Malicious code in xml2stream (npm)
Page 6317 of 6,645