Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,559 total · sorted newest first- Jul 22, 2025
Malware in nf-cons-log
1 compromised version
- Jul 22, 2025
Malware in googleapis-node
1 compromised version
- Jul 22, 2025
Malware in apple-psh
1 compromised version
- Jul 22, 2025
Malicious code in firefox-puppeteer (npm)
2 compromised versions
- Jul 22, 2025
Malicious code in firefox-profiler (npm)
1 compromised version
- Jul 22, 2025
Malware in firefox-puppeteer
1 compromised version
- Jul 22, 2025
Malware in paypal-invoicing
1 compromised version
- Jul 22, 2025
Malware in firefox-profiler
1 compromised version
- Jul 22, 2025
Malicious code in internal-plugin-telemetry-backend (npm)
- Jul 22, 2025
Malware in internal-plugin-telemetry-backend
1 compromised version
- Jul 22, 2025
Malicious code in sha256-validator-pack (npm)
2 compromised versions
- Jul 22, 2025
Malicious code in sha256-pack (npm)
- Jul 22, 2025
Malware in sha256-validator-pack
1 compromised version
- Jul 22, 2025
Malware in sha256-pack
1 compromised version
- Jul 22, 2025
Malicious code in nestjs-io-helper (npm)
- Jul 22, 2025
Malware in nestjs-io-helper
1 compromised version
- Jul 22, 2025
Malicious code in kiwi-module-recommendations (npm)
- Jul 22, 2025
Malware in kiwi-module-recommendations
1 compromised version
- Jul 22, 2025
Malicious code in kiwi-shared (npm)
- Jul 22, 2025
Malicious code in kiwi-module-seo-featured (npm)
- Jul 22, 2025
Malicious code in kiwi-module-search (npm)
- Jul 22, 2025
Malicious code in kiwi-module-cdp (npm)
- Jul 22, 2025
Malicious code in kiwi-module-browse (npm)
- Jul 22, 2025
Malware in kiwi-module-search
1 compromised version
- Jul 22, 2025
Malware in kiwi-module-browse
1 compromised version
- Jul 22, 2025
Malware in kiwi-module-seo-featured
1 compromised version
- Jul 22, 2025
Malware in @shadowmonarchx/eslint_plugin_react
1 compromised version
- Jul 22, 2025
Malware in kiwi-shared
1 compromised version
- Jul 22, 2025
Malware in kiwi-module-cdp
1 compromised version
- Jul 22, 2025
Malicious code in internallib_v730 (npm)
- Jul 22, 2025
Malicious code in internallib_v687 (npm)
- Jul 22, 2025
Malware in internallib_v687
1 compromised version
- Jul 22, 2025
Malware in internallib_v730
1 compromised version
- Jul 22, 2025
Malicious code in fxa-setting (npm)
- Jul 22, 2025
Malware in fxa-auth-server
1 compromised version
- Jul 22, 2025
Malware in fxa-setting
1 compromised version
- Jul 22, 2025
Malware in graphprotocol-tools-monorepo
1 compromised version
- Jul 22, 2025
Malware in playwright-e2e-testing
1 compromised version
- Jul 22, 2025
Malware in fxa-admin-panel
1 compromised version
- Jul 22, 2025
Malware in graphql-commons
1 compromised version
- Jul 22, 2025
Malware in nonsensetest
1 compromised version
- Jul 22, 2025
Malware in consgraphql
1 compromised version
- Jul 22, 2025
Malware in consgraphqlnodeserv
1 compromised version
- Jul 22, 2025
Malicious code in scenes-testing (npm)
- Jul 22, 2025
Malicious code in scenes-e2e (npm)
- Jul 22, 2025
Malicious code in scenes-devtools (npm)
- Jul 22, 2025
Malicious code in scenes-core (npm)
- Jul 22, 2025
Malicious code in lint-pr-title (npm)
- Jul 22, 2025
Malicious code in grafana-scenes-ml (npm)
- Jul 22, 2025
Malicious code in get-latest-workflow-artifact (npm)
Page 6257 of 7,312