Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,559 total · sorted newest first- Jul 22, 2025
Malicious code in adspaces (npm)
1 compromised version
- Jul 22, 2025
Malware in cookiefunctions
1 compromised version
- Jul 22, 2025
Malware in adspaces
1 compromised version
- Jul 22, 2025
Malware in nbastatsleftnav
1 compromised version
- Jul 22, 2025
Malicious code in cloudmedia (npm)
- Jul 22, 2025
Malware in cloudmedia
1 compromised version
- Jul 22, 2025
Malicious code in nodemail-lite (npm)
- Jul 22, 2025
Malware in nodemail-lite
1 compromised version
- Jul 22, 2025
Malicious code in nodemailer-enhancer (npm)
- Jul 22, 2025
Malware in nodemailer-enhancer
1 compromised version
- Jul 22, 2025
Malware in wix-test-package
1 compromised version
- Jul 22, 2025
Malicious code in obvbd (npm)
1 compromised version
- Jul 22, 2025
Malware in obvbd
1 compromised version
- Jul 22, 2025
Malware in dashboard-demo
1 compromised version
- Jul 22, 2025
Malware in textlocal-messenger
1 compromised version
- Jul 22, 2025
Malware in vault-wallet-toolkit
1 compromised version
- Jul 22, 2025
Malicious code in dc-dependencyv (npm)
- Jul 22, 2025
Malware in dc-dependencyv
1 compromised version
- Jul 22, 2025
Malware in ru.rustore.core
1 compromised version
- Jul 22, 2025
Malware in yarn-test-git-repo
1 compromised version
- Jul 22, 2025
Malicious code in json-cookie-csv (npm)
4 compromised versions
- Jul 22, 2025
Malware in json-cookie-csv
1 compromised version
- Jul 22, 2025
Malicious code in internallib_v866 (npm)
- Jul 22, 2025
Malware in internallib_v866
1 compromised version
- Jul 22, 2025
Malicious code in mydealer-content-service (npm)
3 compromised versions
- Jul 22, 2025
Malware in mydealer-content-service
1 compromised version
- Jul 22, 2025
Malicious code in user-interaction-service (npm)
2 compromised versions
- Jul 22, 2025
Malicious code in partnersservices-payoneer (npm)
5 compromised versions
- Jul 22, 2025
Malicious code in navigation-service (npm)
2 compromised versions
- Jul 22, 2025
Malicious code in mydealer-service (npm)
5 compromised versions
- Jul 22, 2025
Malicious code in mydealer-configuration-service (npm)
5 compromised versions
- Jul 22, 2025
Malicious code in aspida-lsd (npm)
1 compromised version
- Jul 22, 2025
Malicious code in api-key-provider (npm)
- Jul 22, 2025
Malicious code in adaptivecards-extras (npm)
8 compromised versions
- Jul 22, 2025
Malware in navigation-service
1 compromised version
- Jul 22, 2025
Malware in mydealer-service
1 compromised version
- Jul 22, 2025
Malware in financialforce
1 compromised version
- Jul 22, 2025
Malware in api-key-provider
1 compromised version
- Jul 22, 2025
Malware in mydealer-configuration-service
1 compromised version
- Jul 22, 2025
Malware in jquery-dragster
1 compromised version
- Jul 22, 2025
Malware in partnersservices-payoneer
1 compromised version
- Jul 22, 2025
Malware in adaptivecards-extras
1 compromised version
- Jul 22, 2025
Malware in aspida-lsd
1 compromised version
- Jul 22, 2025
Malware in user-interaction-service
1 compromised version
- Jul 22, 2025
Malicious code in nf-cons-log (npm)
6 compromised versions
- Jul 22, 2025
Malicious code in monosize-bundler-rsbuild (npm)
8 compromised versions
- Jul 22, 2025
Malicious code in googleapis-node (npm)
9 compromised versions
- Jul 22, 2025
Malicious code in apple-psh (npm)
9 compromised versions
- Jul 22, 2025
Malware in paypal-url-generator
1 compromised version
- Jul 22, 2025
Malware in monosize-bundler-rsbuild
1 compromised version
Page 6256 of 7,312