Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Jun 28, 2025
Malicious code in globals-package (npm)
- Jun 28, 2025
Malicious code in es6-module-package (npm)
- Jun 28, 2025
Malicious code in test4-ross4 (npm)
2 compromised versions
- Jun 28, 2025
Malicious code in lard-o-matic (npm)
1 compromised version
- Jun 28, 2025
Malicious code in maybe-i-would-like-a-banana (npm)
2 compromised versions
- Jun 28, 2025
Malicious code in side-effects-package (npm)
1 compromised version
- Jun 28, 2025
Malicious code in flag-package (npm)
1 compromised version
- Jun 28, 2025
Malicious code in dynamic-target (npm)
- Jun 28, 2025
Malicious code in dynamic-stealer (npm)
1 compromised version
- Jun 28, 2025
Malicious code in dynamic-importer2 (npm)
- Jun 28, 2025
Malicious code in beanstalk-api (npm)
1 compromised version
- Jun 28, 2025
Malicious code in handlebars-formatter (npm)
6 compromised versions
- Jun 28, 2025
Malicious code in blurmph (npm)
- Jun 28, 2025
Malicious code in es6modules-nodejs (npm)
- Jun 28, 2025
Malicious code in nodergb-server (npm)
- Jun 28, 2025
Malicious code in typing-extensions-plus (PyPI)
3 compromised versions
- Jun 28, 2025
Malicious code in commonjs-quirks (npm)
1 compromised version
- Jun 28, 2025
Malicious code in commonjs-package (npm)
1 compromised version
- Jun 28, 2025
Malicious code in cms-media-bridge (npm)
2 compromised versions
- Jun 28, 2025
Malicious code in pkg-dev-deps-only (npm)
1 compromised version
- Jun 28, 2025
Malicious code in prototype-poisoning-package (npm)
1 compromised version
- Jun 28, 2025
Malicious code in managment (PyPI)
1 compromised version
- Jun 28, 2025
Malicious code in cpan (PyPI)
3 compromised versions
- Jun 28, 2025
Malicious code in natel-plotly-panel (npm)
4 compromised versions
- Jun 28, 2025
Malicious code in online-learning-translations (npm)
- Jun 28, 2025
Malicious code in online-learning-components (npm)
- Jun 28, 2025
Malicious code in online-learning-ui (npm)
- Jun 27, 2025
Malicious code in i-just-f-hate-bananas-plz-dont-mind (npm)
- Jun 27, 2025
Malicious code in i-just-love-bananas-dont-mind (npm)
1 compromised version
- Jun 27, 2025
Malicious code in walletsendmoney-paypal (npm)
2 compromised versions
- Jun 27, 2025
Malicious code in bootstrap-modules (npm)
- Jun 27, 2025
Malicious code in my-little-package-library (npm)
- Jun 27, 2025
Malicious code in core_filters (npm)
- Jun 27, 2025
Malicious code in cf-install (npm)
- Jun 27, 2025
Malicious code in styled-components-react18-v5 (npm)
- Jun 27, 2025
Malware in synerix
1 compromised version
- Jun 27, 2025
Malware in remitly-icon-font
1 compromised version
- Jun 27, 2025
Malicious code in validate-rb (npm)
1 compromised version
- Jun 27, 2025
Malware in just-config-data
1 compromised version
- Jun 27, 2025
Malware in pxsceneui-example-02
1 compromised version
- Jun 27, 2025
Malicious code in retaillocationserv-paypal (npm)
1 compromised version
- Jun 27, 2025
Malware in walmart-ui
1 compromised version
- Jun 27, 2025
Malware in idse
1 compromised version
- Jun 27, 2025
Malware in myatt
1 compromised version
- Jun 27, 2025
Malware in seller-center
1 compromised version
- Jun 27, 2025
Malware in z0rsdumbtestnonshould
1 compromised version
- Jun 27, 2025
Malware in hardhat-contract-deploy
1 compromised version
- Jun 27, 2025
Malware in @ftapi/secuauth
1 compromised version
- Jun 27, 2025
Malware in @ftapi/components
1 compromised version
- Jun 27, 2025
Malicious code in acme-diagnostics (npm)
2 compromised versions
Page 6268 of 7,293