Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Jul 30, 2025
Malicious code in @hypervector/hypervector-tbank-test (npm)
- Jul 30, 2025
Malware in @hypervector/hypervector-tbank-test
1 compromised version
- Jul 30, 2025
Malware in @hypervector/hypervector-test
1 compromised version
- Jul 30, 2025
Malware in @platform-ui-storybook/copy-button
1 compromised version
- Jul 30, 2025
Malicious code in rca-overlay-panel (npm)
1 compromised version
- Jul 30, 2025
Malicious code in flatfox-api (PyPI)
6 compromised versions
- Jul 30, 2025
Malicious code in inditextech (npm)
3 compromised versions
- Jul 30, 2025
Malicious code in mimelib2 (npm)
- Jul 30, 2025
Malware in mimelib2
1 compromised version
- Jul 30, 2025
Malicious code in @azet/api (npm)
1 compromised version
- Jul 30, 2025
Malicious code in webpack-server-config (npm)
- Jul 30, 2025
Malware in webpack-server-config
1 compromised version
- Jul 30, 2025
Malicious code in vite-simpleparse (npm)
- Jul 30, 2025
Malware in vite-simpleparse
1 compromised version
- Jul 30, 2025
Malicious code in vite-postcss-nested (npm)
1 compromised version
- Jul 30, 2025
Malware in vite-postcss-nested
1 compromised version
- Jul 30, 2025
Malicious code in vite-postcss-kit (npm)
- Jul 30, 2025
Malware in vite-postcss-kit
1 compromised version
- Jul 30, 2025
Malicious code in vite-log-plugin (npm)
- Jul 30, 2025
Malware in vite-log-plugin
1 compromised version
- Jul 30, 2025
Malicious code in vanilla-cacher (npm)
- Jul 30, 2025
Malware in vanilla-cacher
1 compromised version
- Jul 30, 2025
Malicious code in stream-loggers (npm)
- Jul 30, 2025
Malware in stream-loggers
1 compromised version
- Jul 30, 2025
Malicious code in redux-eslint-saga (npm)
- Jul 30, 2025
Malware in redux-eslint-saga
1 compromised version
- Jul 30, 2025
Malicious code in real-socket-rt (npm)
1 compromised version
- Jul 30, 2025
Malware in real-socket-rt
1 compromised version
- Jul 30, 2025
Malicious code in react-qrcode-icon (npm)
- Jul 30, 2025
Malicious code in react-icon-maker (npm)
- Jul 30, 2025
Malware in react-icon-maker
1 compromised version
- Jul 30, 2025
Malware in react-qrcode-icon
1 compromised version
- Jul 30, 2025
Malicious code in proc-log-cmd (npm)
- Jul 30, 2025
Malware in proc-log-cmd
1 compromised version
- Jul 30, 2025
Malicious code in postcss-minify-theme (npm)
- Jul 30, 2025
Malware in postcss-minify-theme
1 compromised version
- Jul 30, 2025
Malicious code in notification-clients (npm)
- Jul 30, 2025
Malware in notification-clients
1 compromised version
- Jul 30, 2025
Malicious code in node-loggerx (npm)
2 compromised versions
- Jul 30, 2025
Malware in node-loggerx
1 compromised version
- Jul 30, 2025
Malicious code in web3-rtc (npm)
- Jul 30, 2025
Malicious code in next-preconfig (npm)
- Jul 30, 2025
Malware in next-preconfig
1 compromised version
- Jul 30, 2025
Malware in web3-rtc
1 compromised version
- Jul 30, 2025
Malicious code in vite-plugin-reactjs-refresh (npm)
- Jul 30, 2025
Malicious code in json-confs (npm)
- Jul 30, 2025
Malware in vite-plugin-reactjs-refresh
1 compromised version
- Jul 30, 2025
Malware in json-confs
1 compromised version
- Jul 30, 2025
Malicious code in flowhint (npm)
- Jul 30, 2025
Malware in flowhint
1 compromised version
Page 6230 of 7,293