Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Jul 15, 2025
Malware in notifier-loggers
1 compromised version
- Jul 15, 2025
Malware in js-prettier
1 compromised version
- Jul 15, 2025
Malware in @emersonecologics/emerson-angular-trove
1 compromised version
- Jul 15, 2025
Malware in emerson-angular-trove
1 compromised version
- Jul 15, 2025
Malicious code in ui-router-cool-plugin (npm)
- Jul 15, 2025
Malicious code in themeone-utils (npm)
3 compromised versions
- Jul 15, 2025
Malicious code in laudekasarkarmulavakghantamuzi (npm)
1 compromised version
- Jul 15, 2025
Malicious code in heronumberone (npm)
- Jul 15, 2025
Malware in laudekasarkarmulavakghantamuzi
1 compromised version
- Jul 15, 2025
Malware in ember-routing-htmlbars
1 compromised version
- Jul 15, 2025
Malware in themeone-animate
1 compromised version
- Jul 15, 2025
Malware in ui-router-cool-plugin
1 compromised version
- Jul 15, 2025
Malware in themeone-utils
1 compromised version
- Jul 15, 2025
Malware in themeone-event
1 compromised version
- Jul 15, 2025
Malware in heronumberone
1 compromised version
- Jul 15, 2025
Malware in ebay.cookies
1 compromised version
- Jul 15, 2025
Malware in cvent-event-calendar
1 compromised version
- Jul 15, 2025
Malicious code in shardeum-json-rpc (npm)
- Jul 15, 2025
Malicious code in finactivitiy-run (npm)
- Jul 15, 2025
Malicious code in crypto-com-developer-platform-client (npm)
3 compromised versions
- Jul 15, 2025
Malware in crypto-com-developer-platform-client
1 compromised version
- Jul 15, 2025
Malware in finactivitiy-run
1 compromised version
- Jul 15, 2025
Malware in shardeum-json-rpc
1 compromised version
- Jul 15, 2025
Malware in cooo
1 compromised version
- Jul 15, 2025
Malware in com.razer.chromasdk
1 compromised version
- Jul 15, 2025
Malicious code in jss-0.8.4 (npm)
- Jul 15, 2025
Malicious code in js-0.8.3 (npm)
- Jul 15, 2025
Malicious code in codecops (npm)
- Jul 15, 2025
Malware in jss-0.8.4
1 compromised version
- Jul 15, 2025
Malware in codecops
1 compromised version
- Jul 15, 2025
Malware in js-0.8.3
1 compromised version
- Jul 15, 2025
Malicious code in gift-chii-true (npm)
- Jul 15, 2025
Malicious code in boost-chii-90 (npm)
- Jul 15, 2025
Malware in boost-chii-90
1 compromised version
- Jul 15, 2025
Malware in gift-chii-true
1 compromised version
- Jul 15, 2025
Malware in bg-core-payments-automation
1 compromised version
- Jul 15, 2025
Malicious code in webvieweventtest (npm)
- Jul 15, 2025
Malicious code in vss-web-auth-client (npm)
- Jul 15, 2025
Malicious code in ts-immutable-sdk (npm)
- Jul 15, 2025
Malicious code in square-crypto-utils-internal (npm)
- Jul 15, 2025
Malicious code in okta-ui-private-components (npm)
- Jul 15, 2025
Malicious code in neolang-ui (npm)
- Jul 15, 2025
Malicious code in iron-github-io (npm)
- Jul 15, 2025
Malicious code in bombora (npm)
- Jul 15, 2025
Malicious code in appcenter-sampleapp-react-native (npm)
- Jul 15, 2025
Malicious code in ai-gallery (npm)
- Jul 15, 2025
Malicious code in ado-codespaces-auth (npm)
- Jul 15, 2025
Malware in okta-ui-private-components
1 compromised version
- Jul 15, 2025
Malware in ts-immutable-sdk
1 compromised version
- Jul 15, 2025
Malware in iron-github-io
1 compromised version
Page 6248 of 7,293