Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Jul 15, 2025
Malicious code in healthbottestservice (npm)
- Jul 15, 2025
Malicious code in flpmonitor (npm)
- Jul 15, 2025
Malicious code in dt-retag-lib (npm)
- Jul 15, 2025
Malicious code in artifact-registry-client (npm)
1 compromised version
- Jul 15, 2025
Malicious code in ai-audio-descriptions (npm)
- Jul 15, 2025
Malware in flpmonitor
1 compromised version
- Jul 15, 2025
Malware in sentry-bundler-plugin-dev
1 compromised version
- Jul 15, 2025
Malware in artifact-registry-client
1 compromised version
- Jul 15, 2025
Malware in scenes-ml-app
1 compromised version
- Jul 15, 2025
Malware in definitelytyped-tools
1 compromised version
- Jul 15, 2025
Malware in jsonli-conf
1 compromised version
- Jul 15, 2025
Malware in jsonloggers
1 compromised version
- Jul 15, 2025
Malware in ai-audio-descriptions
1 compromised version
- Jul 15, 2025
Malware in healthbottestservice
1 compromised version
- Jul 15, 2025
Malware in old-header-parser
1 compromised version
- Jul 15, 2025
Malware in okta-template-validator
1 compromised version
- Jul 15, 2025
Malware in dt-retag-lib
1 compromised version
- Jul 15, 2025
Malware in buzzwordcrm
1 compromised version
- Jul 15, 2025
Malicious code in ent-esign-newweb (npm)
1 compromised version
- Jul 15, 2025
Malicious code in bk-card-cc-credit-limit-adjustment-ui (npm)
1 compromised version
- Jul 15, 2025
Malware in bk-card-cc-credit-limit-adjustment-ui
1 compromised version
- Jul 15, 2025
Malware in ent-esign-newweb
1 compromised version
- Jul 15, 2025
Malicious code in wb3 (npm)
- Jul 15, 2025
Malicious code in azios.js (npm)
- Jul 15, 2025
Malware in azios.js
1 compromised version
- Jul 15, 2025
Malware in wb3
1 compromised version
- Jul 15, 2025
Malicious code in wrb3 (npm)
- Jul 15, 2025
Malicious code in axio.js (npm)
- Jul 15, 2025
Malicious code in asios.js (npm)
- Jul 15, 2025
Malicious code in acios.js (npm)
- Jul 15, 2025
Malware in asios.js
1 compromised version
- Jul 15, 2025
Malware in acios.js
1 compromised version
- Jul 15, 2025
Malware in axio.js
1 compromised version
- Jul 15, 2025
Malware in wrb3
1 compromised version
- Jul 15, 2025
Malware in @b10902118/note-xss-payload
1 compromised version
- Jul 15, 2025
Malicious code in react-redirect-router (npm)
- Jul 15, 2025
Malware in react-redirect-router
1 compromised version
- Jul 15, 2025
Malware in seller-assistant-commons-fe
1 compromised version
- Jul 15, 2025
Malware in pricing-simulator-lib
1 compromised version
- Jul 15, 2025
Malware in reauthentication-node-sdk
1 compromised version
- Jul 15, 2025
Malicious code in node-mongo-orm (npm)
- Jul 15, 2025
Malware in node-mongo-orm
1 compromised version
- Jul 15, 2025
Malicious code in nextjs-package-purify (npm)
- Jul 15, 2025
Malicious code in nextjs-https-supertest (npm)
- Jul 15, 2025
Malware in nextjs-https-supertest
1 compromised version
- Jul 15, 2025
Malware in nextjs-package-purify
1 compromised version
- Jul 15, 2025
Malicious code in jsonslicer (npm)
- Jul 15, 2025
Malware in jsonslicer
1 compromised version
- Jul 15, 2025
Malicious code in string-parser-utils (npm)
2 compromised versions
- Jul 15, 2025
Malicious code in shared-workflows (npm)
Page 6246 of 7,293