Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Jul 15, 2025
Malicious code in @gdcorp-commerce/cx-event-tracker (npm)
- Jul 15, 2025
Malicious code in @gdcorp-commerce/cx-api-connect (npm)
- Jul 15, 2025
Malicious code in @forge-ui-components/media-player (npm)
- Jul 15, 2025
Malicious code in @ecommerce-cart-ui/client (npm)
- Jul 15, 2025
Malware in @ecommerce-cart-ui/client
1 compromised version
- Jul 15, 2025
Malware in @gdcorp-digitalcare/ux-common
1 compromised version
- Jul 15, 2025
Malware in @gdcorp-commerce/cx-event-tracker
1 compromised version
- Jul 15, 2025
Malware in @gdcorp-commerce/cx-orders
1 compromised version
- Jul 15, 2025
Malware in zeus-mex-profile-viz
1 compromised version
- Jul 15, 2025
Malware in @gdstudio/web-loader
1 compromised version
- Jul 15, 2025
Malware in @gdcorp-digitalcare/ux
1 compromised version
- Jul 15, 2025
Malware in @gdcorp-commerce/cx-api-connect
1 compromised version
- Jul 15, 2025
Malware in @forge-ui-components/media-player
1 compromised version
- Jul 15, 2025
Malware in @gdcorp-commerce/cx-page-container
1 compromised version
- Jul 15, 2025
Malware in @web-kit-package/grab-login
1 compromised version
- Jul 15, 2025
Malware in @gdcorp-commerce/cx-router
1 compromised version
- Jul 15, 2025
Malicious code in worldapp-ui (npm)
- Jul 15, 2025
Malicious code in worldapp-fe-utils (npm)
- Jul 15, 2025
Malicious code in grabcad-ui-elements (npm)
- Jul 15, 2025
Malicious code in grabcad-printers-api (npm)
- Jul 15, 2025
Malicious code in enterprise-stencil (npm)
- Jul 15, 2025
Malicious code in angieslist-office-app-common (npm)
- Jul 15, 2025
Malicious code in affirm-stories (npm)
- Jul 15, 2025
Malware in affirm-stories
1 compromised version
- Jul 15, 2025
Malware in enterprise-stencil
1 compromised version
- Jul 15, 2025
Malware in gs-uitk-analytics-common
1 compromised version
- Jul 15, 2025
Malware in worldapp-ui
1 compromised version
- Jul 15, 2025
Malware in gs-pwm-utilities
1 compromised version
- Jul 15, 2025
Malware in grabcad-ui-elements
1 compromised version
- Jul 15, 2025
Malware in gs-uitk-set-utils
1 compromised version
- Jul 15, 2025
Malware in grabcad-printers-api
1 compromised version
- Jul 15, 2025
Malware in angieslist-office-app-common
1 compromised version
- Jul 15, 2025
Malware in worldapp-fe-utils
1 compromised version
- Jul 15, 2025
Malicious code in cloud-binary (npm)
- Jul 15, 2025
Malware in cloud-binary
1 compromised version
- Jul 15, 2025
Malicious code in modern-react (npm)
- Jul 15, 2025
Malware in modern-react
1 compromised version
- Jul 15, 2025
Malicious code in apple-keto-acv-gummies (npm)
- Jul 15, 2025
Malware in apple-keto-acv-gummies
1 compromised version
- Jul 15, 2025
Malicious code in white-oganesson (npm)
- Jul 15, 2025
Malicious code in lime-thulium (npm)
- Jul 15, 2025
Malicious code in cmc-inferno (npm)
- Jul 15, 2025
Malicious code in blue-einsteinium (npm)
- Jul 15, 2025
Malware in blue-einsteinium
1 compromised version
- Jul 15, 2025
Malware in lime-thulium
1 compromised version
- Jul 15, 2025
Malware in cmc-inferno
1 compromised version
- Jul 15, 2025
Malware in white-oganesson
1 compromised version
- Jul 15, 2025
Malicious code in crto0 (PyPI)
1 compromised version
- Jul 15, 2025
Malicious code in ecinc-cloud-moaxmpp (npm)
2 compromised versions
- Jul 15, 2025
Malicious code in paypal-invoicing (npm)
2 compromised versions
Page 6244 of 7,293