Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Jul 30, 2025
Malicious code in exceljs-ui (npm)
- Jul 30, 2025
Malware in exceljs-ui
1 compromised version
- Jul 30, 2025
Malicious code in cookie-loggo (npm)
- Jul 30, 2025
Malicious code in cookie-logger (npm)
- Jul 30, 2025
Malware in cookie-logger
1 compromised version
- Jul 30, 2025
Malware in cookie-loggo
1 compromised version
- Jul 30, 2025
Malicious code in @kodane/patch-manager (npm)
- Jul 30, 2025
Malware in @kodane/patch-manager
1 compromised version
- Jul 30, 2025
Malicious code in resource_registry (RubyGems)
2 compromised versions
- Jul 30, 2025
Malicious code in maxload (PyPI)
3 compromised versions
- Jul 29, 2025
Malicious code in someeebbb (PyPI)
1 compromised version
- Jul 29, 2025
Malicious code in triple-equal (PyPI)
1 compromised version
- Jul 29, 2025
Malicious code in @xcxcxxx/gsap3 (npm)
2 compromised versions
- Jul 29, 2025
Malicious code in testing123kk (PyPI)
1 compromised version
- Jul 29, 2025
Malware in privmx-crypto
1 compromised version
- Jul 29, 2025
Malware in ngx-satoris
1 compromised version
- Jul 29, 2025
Malicious code in yaetia (npm)
- Jul 29, 2025
Malicious code in storybook-core-core-server-presets-0 (npm)
- Jul 29, 2025
Malware in datadog-instrumentations
1 compromised version
- Jul 29, 2025
Malware in storybook-core-core-server-presets-0
1 compromised version
- Jul 29, 2025
Malware in yaetia
1 compromised version
- Jul 29, 2025
Malicious code in @sys711/my-npx-tool (npm)
- Jul 29, 2025
Malware in @sys711/my-npx-tool
1 compromised version
- Jul 29, 2025
Malware in @secsol5g/qlik-sense
1 compromised version
- Jul 29, 2025
Malware in @company-internal/logger
1 compromised version
- Jul 29, 2025
Malicious code in request-helmet (npm)
- Jul 29, 2025
Malicious code in query-logger (npm)
- Jul 29, 2025
Malware in request-helmet
1 compromised version
- Jul 29, 2025
Malware in query-logger
1 compromised version
- Jul 29, 2025
Malicious code in react-stylizer (npm)
- Jul 29, 2025
Malicious code in react-redux-stylizer (npm)
- Jul 29, 2025
Malware in react-redux-stylizer
1 compromised version
- Jul 29, 2025
Malware in react-stylizer
1 compromised version
- Jul 29, 2025
Malicious code in vite-postcss-bootstrap (npm)
1 compromised version
- Jul 29, 2025
Malware in vite-postcss-bootstrap
1 compromised version
- Jul 29, 2025
Malicious code in tailwind-theme-colors (npm)
- Jul 29, 2025
Malware in tailwind-theme-colors
1 compromised version
- Jul 29, 2025
Malicious code in vite-plugin-js-support (npm)
- Jul 29, 2025
Malware in vite-plugin-js-support
1 compromised version
- Jul 29, 2025
Malicious code in momentjs-poc (npm)
1 compromised version
- Jul 29, 2025
Malicious code in fast-todo-app (npm)
3 compromised versions
- Jul 29, 2025
Malware in budoux-extension
1 compromised version
- Jul 29, 2025
Malware in fast-todo-app
1 compromised version
- Jul 29, 2025
Malware in @ai0x1337/budoux-extension
1 compromised version
- Jul 29, 2025
Malware in @googlesitekit/assets
1 compromised version
- Jul 29, 2025
Malware in npmdeco
1 compromised version
- Jul 29, 2025
Malware in axr-smart-contracts
1 compromised version
- Jul 28, 2025
Malicious code in testpackageroietest3 (PyPI)
1 compromised version
- Jul 28, 2025
Malicious code in testpackageroietest2 (PyPI)
1 compromised version
- Jul 28, 2025
Malicious code in udn_extras (npm)
2 compromised versions
Page 6231 of 7,293