Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Jul 31, 2025
Malicious code in pr0tobuff (npm)
1 compromised version
- Jul 31, 2025
Malicious code in policy-agent-client (npm)
1 compromised version
- Jul 31, 2025
Malicious code in pmcrypto (npm)
2 compromised versions
- Jul 31, 2025
Malicious code in npm-ot-test (npm)
1 compromised version
- Jul 31, 2025
Malicious code in nodemailer-utils (npm)
1 compromised version
- Jul 31, 2025
Malicious code in node-melitk-otel (npm)
1 compromised version
- Jul 31, 2025
Malicious code in ninjaonsteroids (npm)
32 compromised versions
- Jul 31, 2025
Malicious code in nf-nfa-types (npm)
1 compromised version
- Jul 31, 2025
Malicious code in net.operation (npm)
1 compromised version
- Jul 31, 2025
Malicious code in ndsdshdjshdjsh (npm)
1 compromised version
- Jul 31, 2025
Malicious code in my-confused-package (npm)
1 compromised version
- Jul 31, 2025
Malicious code in modalvalidator2 (npm)
2 compromised versions
- Jul 31, 2025
Malicious code in modal-arbitary (npm)
3 compromised versions
- Jul 31, 2025
Malicious code in mod-trans (npm)
1 compromised version
- Jul 31, 2025
Malicious code in metric_collector (npm)
1 compromised version
- Jul 31, 2025
Malicious code in mashloops (npm)
1 compromised version
- Jul 31, 2025
Malicious code in lint-staged-custom (npm)
1 compromised version
- Jul 31, 2025
Malicious code in num2words (PyPI)
2 compromised versions
- Jul 31, 2025
num2words subjected to phishing attack, two versions published containing malware
1 compromised version
- Jul 31, 2025
num2words subjected to phishing attack, two versions published containing malware
1 compromised version
- Jul 31, 2025
num2words subjected to phishing attack, two versions published containing malware
- Jul 31, 2025
num2words subjected to phishing attack, two versions published containing malware
- Jul 31, 2025
Malicious code in keypair-encryption-utils (npm)
1 compromised version
- Jul 31, 2025
Malicious code in just-elements (npm)
1 compromised version
- Jul 31, 2025
Malicious code in jsonwedjoken (npm)
4 compromised versions
- Jul 31, 2025
Malicious code in intercom-gtm-js (npm)
1 compromised version
- Jul 31, 2025
Malicious code in hushlockler (npm)
1 compromised version
- Jul 31, 2025
Malicious code in gulp-prestashop (npm)
1 compromised version
- Jul 31, 2025
Malicious code in gjsdgjgjt6 (npm)
1 compromised version
- Jul 31, 2025
Malicious code in frontend-feature-flags (npm)
1 compromised version
- Jul 31, 2025
Malicious code in fooldependppu60h (npm)
1 compromised version
- Jul 31, 2025
Malicious code in fooldependaairbf (npm)
1 compromised version
- Jul 31, 2025
Malicious code in fasterhttp (npm)
3 compromised versions
- Jul 31, 2025
Malicious code in ethers-js-core (npm)
1 compromised version
- Jul 31, 2025
Malicious code in essentialss (npm)
4 compromised versions
- Jul 31, 2025
Malicious code in ent-profile-template (npm)
1 compromised version
- Jul 31, 2025
Malicious code in emailphotogallery (npm)
1 compromised version
- Jul 31, 2025
Malicious code in e-voting-libraries-ui-kit (npm)
7 compromised versions
- Jul 31, 2025
Malicious code in dndattachmentt (npm)
1 compromised version
- Jul 31, 2025
Malicious code in disabled_native_dep (npm)
1 compromised version
- Jul 31, 2025
Malicious code in core.trigger (npm)
1 compromised version
- Jul 31, 2025
Malicious code in comp-base-birthdate (npm)
1 compromised version
- Jul 31, 2025
Malicious code in com.google.xr.xdtk (npm)
1 compromised version
- Jul 31, 2025
Malicious code in cloudflared-x64 (npm)
1 compromised version
- Jul 31, 2025
Malicious code in box-lib-node (npm)
2 compromised versions
- Jul 31, 2025
Malicious code in boost-chii-new (npm)
3 compromised versions
- Jul 31, 2025
Malicious code in bergaa (npm)
4 compromised versions
- Jul 31, 2025
Malicious code in assetdash-og-new (npm)
1 compromised version
- Jul 31, 2025
Malicious code in asdqweasdregistry-auth-token (npm)
1 compromised version
- Jul 31, 2025
Malicious code in analytics-messages-definition-activities (npm)
1 compromised version
Page 6226 of 7,293