Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Jun 30, 2025
Malicious code in mod-cloud (npm)
- Jun 30, 2025
Malicious code in canvas-chache-kit (npm)
- Jun 30, 2025
Malicious code in @verrylinh/discord (npm)
- Jun 30, 2025
Malware in youku-search
1 compromised version
- Jun 30, 2025
Malware in canvas-chache-kit
1 compromised version
- Jun 30, 2025
Malware in root-direct
1 compromised version
- Jun 30, 2025
Malware in very-zeld
1 compromised version
- Jun 30, 2025
Malware in @verrylinh/discord
1 compromised version
- Jun 30, 2025
Malware in node-pretier
1 compromised version
- Jun 30, 2025
Malware in node-pkg-cache
1 compromised version
- Jun 30, 2025
Malware in nava-clone
1 compromised version
- Jun 30, 2025
Malware in node-smskc
1 compromised version
- Jun 30, 2025
Malware in mod-cloud
1 compromised version
- Jun 30, 2025
Malware in nodyn
1 compromised version
- Jun 30, 2025
Malware in viryc-hsc
1 compromised version
- Jun 30, 2025
Malicious code in viry-nexa (npm)
4 compromised versions
- Jun 30, 2025
Malicious code in veynlinh-sky (npm)
7 compromised versions
- Jun 30, 2025
Malicious code in sysframe (npm)
- Jun 30, 2025
Malware in veynlinh-sky
1 compromised version
- Jun 30, 2025
Malware in viry-nexa
1 compromised version
- Jun 30, 2025
Malware in sysframe
1 compromised version
- Jun 30, 2025
Malicious code in jsontostr (npm)
- Jun 30, 2025
Malicious code in jsonlogs (npm)
- Jun 30, 2025
Malware in jsonlogs
1 compromised version
- Jun 30, 2025
Malware in jsontostr
1 compromised version
- Jun 30, 2025
Malicious code in byaziine_validator (npm)
- Jun 29, 2025
Malicious code in sdk.babelhelpers (npm)
4 compromised versions
- Jun 29, 2025
Malicious code in example-target-package (npm)
- Jun 29, 2025
Malicious code in vwa-visualizer (npm)
- Jun 29, 2025
Malicious code in action_dropdown (npm)
- Jun 29, 2025
Malicious code in sizings (npm)
- Jun 29, 2025
Malicious code in mapbox-gl-js (npm)
- Jun 29, 2025
Malicious code in trace-mapping (npm)
- Jun 29, 2025
Malicious code in hancsv (PyPI)
1 compromised version
- Jun 29, 2025
Malicious code in workflows-templates (npm)
11 compromised versions
- Jun 29, 2025
Malicious code in oneplussam (npm)
1 compromised version
- Jun 29, 2025
Malicious code in dynatrace-test-automation (npm)
4 compromised versions
- Jun 29, 2025
Malicious code in smart-attachments (npm)
1 compromised version
- Jun 29, 2025
Malicious code in assets-atlas-editor (npm)
1 compromised version
- Jun 29, 2025
Malicious code in jsmdc (npm)
1 compromised version
- Jun 29, 2025
Malicious code in plugin-api-version (npm)
1 compromised version
- Jun 29, 2025
Malicious code in @checkbox-technology-pty-ltd/custom-block-kit (npm)
1 compromised version
- Jun 29, 2025
Malicious code in titan-exchange-shared (npm)
1 compromised version
- Jun 29, 2025
Malicious code in puppetexplorer (npm)
2 compromised versions
- Jun 29, 2025
Malicious code in application-data (npm)
3 compromised versions
- Jun 28, 2025
Malicious code in ardiffact (npm)
1 compromised version
- Jun 28, 2025
Malicious code in govuk_frontend_alpha (npm)
- Jun 28, 2025
Malicious code in astrobot (npm)
3 compromised versions
- Jun 28, 2025
Malicious code in epic-mw (npm)
- Jun 28, 2025
Malicious code in umd-package (npm)
Page 6267 of 7,293