Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Jul 1, 2025
Malicious code in sdk.babelhelpz (npm)
1 compromised version
- Jul 1, 2025
Malicious code in sdk.babeltest (npm)
1 compromised version
- Jul 1, 2025
Malicious code in ebay.cookies (npm)
- Jul 1, 2025
Malicious code in @paysafe-consumer/authentication (npm)
- Jul 1, 2025
Malicious code in price_wrapper (npm)
- Jul 1, 2025
Malicious code in list_column_item (npm)
- Jul 1, 2025
Malicious code in category_textured_background (npm)
- Jul 1, 2025
Malicious code in gad-logger (npm)
- Jul 1, 2025
Malware in gad-logger
1 compromised version
- Jul 1, 2025
Malicious code in stylelint-recommended-conf (npm)
3 compromised versions
- Jul 1, 2025
Malware in stylelint-recommended-conf
1 compromised version
- Jul 1, 2025
Malicious code in tag-rotator (npm)
2 compromised versions
- Jul 1, 2025
Malicious code in guild-rotator (npm)
- Jul 1, 2025
Malware in guild-rotator
1 compromised version
- Jul 1, 2025
Malware in tag-rotator
1 compromised version
- Jul 1, 2025
Malicious code in tools-component-library (npm)
- Jul 1, 2025
Malware in tools-component-library
1 compromised version
- Jul 1, 2025
Malware in kenzup-react-native-rsa-native
1 compromised version
- Jul 1, 2025
Malicious code in microviewsharedwidgets (npm)
1 compromised version
- Jul 1, 2025
Malware in com.unity.dt.app-ui
1 compromised version
- Jul 1, 2025
Malicious code in @jpl-encoder/node-encrypt (npm)
- Jul 1, 2025
Malware in @jpl-encoder/node-encrypt
1 compromised version
- Jul 1, 2025
Malicious code in cooo (npm)
6 compromised versions
- Jul 1, 2025
Malicious code in emerson-angular-trove (npm)
1 compromised version
- Jul 1, 2025
Malicious code in themeone-animate (npm)
5 compromised versions
- Jul 1, 2025
Malicious code in r6-info.js (npm)
- Jul 1, 2025
Malicious code in dtable-js (npm)
- Jul 1, 2025
Malware in dtable-js
1 compromised version
- Jul 1, 2025
Malware in r6-info.js
1 compromised version
- Jul 1, 2025
Malicious code in sdp-transform-grammar (npm)
58 compromised versions
- Jul 1, 2025
Malicious code in react-forget-runtime (npm)
34 compromised versions
- Jul 1, 2025
Malicious code in hero-tracing-placeholder (npm)
54 compromised versions
- Jul 1, 2025
Malicious code in gkx (npm)
12 compromised versions
- Jul 1, 2025
Malicious code in fb-error-lite (npm)
41 compromised versions
- Jul 1, 2025
Malicious code in airbnb-location-suggester (npm)
106 compromised versions
- Jul 1, 2025
Malware in react-forget-runtime
1 compromised version
- Jul 1, 2025
Malware in hero-tracing-placeholder
1 compromised version
- Jul 1, 2025
Malware in gkx
1 compromised version
- Jul 1, 2025
Malware in fb-error-lite
1 compromised version
- Jul 1, 2025
Malware in sdp-transform-grammar
1 compromised version
- Jul 1, 2025
Malware in airbnb-location-suggester
1 compromised version
- Jul 1, 2025
Malicious code in dm-cloak-security (npm)
- Jul 1, 2025
Malicious code in cloak-security (npm)
- Jul 1, 2025
Malware in cloak-security
1 compromised version
- Jul 1, 2025
Malware in dm-cloak-security
1 compromised version
- Jul 1, 2025
Malware in @evoplay-spinential/poc-rce
1 compromised version
- Jul 1, 2025
Malware in @evoplay-spinential/test-module
1 compromised version
- Jul 1, 2025
Malicious code in themeone-event (npm)
6 compromised versions
- Jul 1, 2025
Malicious code in groq-link (npm)
7 compromised versions
- Jul 1, 2025
Malicious code in icinga (npm)
1 compromised version
Page 6265 of 7,293