Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Jul 3, 2025
Malicious code in 182-23run (npm)
- Jul 3, 2025
Malicious code in lz-evm-protocol-v2 (npm)
1 compromised version
- Jul 3, 2025
Malicious code in systemjs-builder-test (npm)
- Jul 3, 2025
Malicious code in lunasec-sdks (npm)
- Jul 3, 2025
Malicious code in react-fixtures-ssr (npm)
- Jul 3, 2025
Malicious code in frontend-redux (npm)
- Jul 3, 2025
Malicious code in title-dependencies (npm)
- Jul 3, 2025
Malicious code in dns-exfil-poc (npm)
- Jul 3, 2025
Malicious code in rjs-test (npm)
1 compromised version
- Jul 3, 2025
Malicious code in @emersonecologics/emerson-angular-trove (npm)
2 compromised versions
- Jul 3, 2025
Malicious code in stencil-module-base (npm)
2 compromised versions
- Jul 3, 2025
Malicious code in comcastapp (npm)
1 compromised version
- Jul 3, 2025
Malware in math-utils-gava
1 compromised version
- Jul 3, 2025
Malware in ati-requisites-form
1 compromised version
- Jul 3, 2025
Malware in ember-htmlbars
1 compromised version
- Jul 3, 2025
Malware in icinga
1 compromised version
- Jul 3, 2025
Malware in utils-component
1 compromised version
- Jul 3, 2025
Malware in comp-base-btn-switch
1 compromised version
- Jul 3, 2025
Malware in web-experience-app
1 compromised version
- Jul 3, 2025
Malware in blade_background
1 compromised version
- Jul 3, 2025
Malware in wiki-edit
1 compromised version
- Jul 3, 2025
Malicious code in regex-puppeteer (npm)
1 compromised version
- Jul 3, 2025
Malicious code in pupeteer-cluster-helper (npm)
3 compromised versions
- Jul 3, 2025
Malware in regex-puppeteer
1 compromised version
- Jul 3, 2025
Malware in pupeteer-cluster-helper
1 compromised version
- Jul 3, 2025
Malware in o11y-ds-frontend
1 compromised version
- Jul 3, 2025
Malicious code in n8n-nodes-zalo-user-v2 (npm)
- Jul 3, 2025
Malware in n8n-nodes-zalo-user-v2
1 compromised version
- Jul 3, 2025
Malicious code in @stihlus/stihl-icons-pack (npm)
7 compromised versions
- Jul 3, 2025
Malware in @stihlus/stihl-icons-pack
1 compromised version
- Jul 3, 2025
Malware in @saas2/utils
1 compromised version
- Jul 3, 2025
Malicious code in @figshare/old-viewers (npm)
1 compromised version
- Jul 3, 2025
Malware in @figshare/old-viewers
1 compromised version
- Jul 3, 2025
Malicious code in poseidon-validate (npm)
9 compromised versions
- Jul 3, 2025
Malware in poseidon-validate
1 compromised version
- Jul 3, 2025
Malicious code in show-dependencies (npm)
1 compromised version
- Jul 3, 2025
Malicious code in grafana-lokiexplore-app (npm)
1 compromised version
- Jul 2, 2025
Malicious code in k6-studio (npm)
3 compromised versions
- Jul 2, 2025
Malicious code in @frontend-clients/design-system (npm)
2 compromised versions
- Jul 2, 2025
Malicious code in @frontend-clients/core (npm)
10 compromised versions
- Jul 2, 2025
Malicious code in helioviewer.org (npm)
2 compromised versions
- Jul 2, 2025
Malicious code in dds-js (npm)
1 compromised version
- Jul 2, 2025
Malicious code in pyroscope-nodejs (npm)
1 compromised version
- Jul 2, 2025
Malicious code in grafana-pyroscope (npm)
2 compromised versions
- Jul 2, 2025
Malicious code in cmr-stac (npm)
5 compromised versions
- Jul 2, 2025
Malware in volehai-poc
1 compromised version
- Jul 2, 2025
Malicious code in hardhat-deploy-notification (npm)
4 compromised versions
- Jul 2, 2025
Malware in hardhat-deploy-notification
1 compromised version
- Jul 2, 2025
Malicious code in hardhat-deploy-notifier (npm)
- Jul 2, 2025
Malware in hardhat-deploy-notifier
1 compromised version
Page 6261 of 7,293