Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Jul 15, 2025
Malicious code in crypto-notifier (npm)
- Jul 15, 2025
Malware in crypto-notifier
1 compromised version
- Jul 15, 2025
Malicious code in telegram-pk-auto-sender (npm)
- Jul 15, 2025
Malware in telegram-pk-auto-sender
1 compromised version
- Jul 15, 2025
Malicious code in web3js-wallet (npm)
92 compromised versions
- Jul 15, 2025
Malware in web3js-wallet
1 compromised version
- Jul 15, 2025
Malicious code in date-fns-2 (npm)
- Jul 15, 2025
Malicious code in public-tools-and-demos (npm)
2 compromised versions
- Jul 15, 2025
Malicious code in @ivy-shared-components/iconslibrary (npm)
3 compromised versions
- Jul 15, 2025
Malicious code in node-mongodb-logger (npm)
- Jul 15, 2025
Malware in node-mongodb-logger
1 compromised version
- Jul 15, 2025
Malicious code in pino-req (npm)
- Jul 15, 2025
Malicious code in parser-query (npm)
- Jul 15, 2025
Malware in parser-query
1 compromised version
- Jul 15, 2025
Malware in pino-req
1 compromised version
- Jul 15, 2025
Malicious code in vite-lightparse (npm)
- Jul 15, 2025
Malware in vite-lightparse
1 compromised version
- Jul 15, 2025
Malicious code in tailwind-base-theme (npm)
- Jul 15, 2025
Malware in tailwind-base-theme
1 compromised version
- Jul 15, 2025
Malicious code in tailwind-config-plugin (npm)
- Jul 15, 2025
Malware in tailwind-config-plugin
1 compromised version
- Jul 15, 2025
Malicious code in vite-proc-log (npm)
- Jul 15, 2025
Malware in vite-proc-log
1 compromised version
- Jul 15, 2025
Malicious code in cronek (npm)
- Jul 15, 2025
Malware in cronek
1 compromised version
- Jul 15, 2025
Malicious code in vite-log-handler (npm)
- Jul 15, 2025
Malware in vite-log-handler
1 compromised version
- Jul 15, 2025
Malicious code in proc-logger (npm)
- Jul 15, 2025
Malware in proc-logger
1 compromised version
- Jul 15, 2025
Malicious code in flowframe (npm)
- Jul 15, 2025
Malware in flowframe
1 compromised version
- Jul 15, 2025
Malicious code in ecom-config (npm)
- Jul 15, 2025
Malware in ecom-config
1 compromised version
- Jul 15, 2025
Malicious code in vite-usageit (npm)
- Jul 15, 2025
Malware in vite-usageit
1 compromised version
- Jul 15, 2025
Malicious code in vite-postcss-tools (npm)
3 compromised versions
- Jul 15, 2025
Malicious code in pretty-chalk (npm)
- Jul 15, 2025
Malware in pretty-chalk
1 compromised version
- Jul 15, 2025
Malware in vite-postcss-tools
1 compromised version
- Jul 15, 2025
Malicious code in querypilot (npm)
- Jul 15, 2025
Malware in querypilot
1 compromised version
- Jul 15, 2025
Malicious code in nodestream-log (npm)
- Jul 15, 2025
Malware in nodestream-log
1 compromised version
- Jul 15, 2025
Malware in mre-config-react
1 compromised version
- Jul 15, 2025
Malware in mre-layout-react
1 compromised version
- Jul 15, 2025
Malicious code in sentry-bundler-plugin-dev (npm)
2 compromised versions
- Jul 15, 2025
Malicious code in scenes-ml-app (npm)
- Jul 15, 2025
Malicious code in okta-template-validator (npm)
1 compromised version
- Jul 15, 2025
Malicious code in jsonloggers (npm)
- Jul 15, 2025
Malicious code in jsonli-conf (npm)
Page 6245 of 7,293