Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Jun 21, 2025
Malicious code in docs-root (npm)
- Jun 21, 2025
Malicious code in pythondm32 (PyPI)
1 compromised version
- Jun 21, 2025
Malicious code in hcbridge (npm)
1 compromised version
- Jun 21, 2025
Malicious code in audible-react-assets (npm)
1 compromised version
- Jun 21, 2025
Malicious code in cro-pricing (npm)
5 compromised versions
- Jun 20, 2025
Malicious code in integromat-iml (npm)
1 compromised version
- Jun 20, 2025
Malicious code in postcss-theme-vars (npm)
- Jun 20, 2025
Malicious code in postcss-query-splitter (npm)
- Jun 20, 2025
Malicious code in postcss-layout-grid (npm)
1 compromised version
- Jun 20, 2025
Malicious code in postcss-color-fn (npm)
- Jun 20, 2025
Malicious code in next-sweetalert2 (npm)
- Jun 20, 2025
Malware in postcss-query-splitter
1 compromised version
- Jun 20, 2025
Malware in postcss-color-fn
1 compromised version
- Jun 20, 2025
Malware in postcss-layout-grid
1 compromised version
- Jun 20, 2025
Malware in postcss-theme-vars
1 compromised version
- Jun 20, 2025
Malware in next-sweetalert2
1 compromised version
- Jun 20, 2025
Malicious code in ati-requisites-form (npm)
- Jun 20, 2025
Malicious code in camelcase-v2 (npm)
- Jun 20, 2025
Malicious code in prior-config (npm)
- Jun 20, 2025
Malware in prior-config
1 compromised version
- Jun 20, 2025
Malicious code in vite-auditlog (npm)
- Jun 20, 2025
Malware in vite-auditlog
1 compromised version
- Jun 20, 2025
Malicious code in my_module_luckywater (npm)
- Jun 20, 2025
Malicious code in jsonwepjoken (npm)
1 compromised version
- Jun 20, 2025
Malware in jsonwepjoken
1 compromised version
- Jun 20, 2025
Malware in my_module_luckywater
1 compromised version
- Jun 20, 2025
Malicious code in @com.att.vstb/vstb (npm)
3 compromised versions
- Jun 20, 2025
Malicious code in @com.att.dtventertainment/dfw-pm-yo-space-plugin (npm)
- Jun 20, 2025
Malware in @com.att.dtventertainment/dfw-pm-yo-space-plugin
1 compromised version
- Jun 20, 2025
Malware in @com.att.vstb/vstb
1 compromised version
- Jun 20, 2025
Malicious code in vscode-webview-common (npm)
- Jun 20, 2025
Malicious code in thunderbolt-features-loaders (npm)
- Jun 20, 2025
Malicious code in somm-boilerplate (npm)
- Jun 20, 2025
Malicious code in rulai (npm)
- Jun 20, 2025
Malicious code in rma-shared (npm)
- Jun 20, 2025
Malicious code in prismicio-types (npm)
- Jun 20, 2025
Malicious code in pfm-app (npm)
- Jun 20, 2025
Malicious code in fwc-core (npm)
- Jun 20, 2025
Malicious code in envs-validator (npm)
- Jun 20, 2025
Malware in vscode-webview-common
1 compromised version
- Jun 20, 2025
Malware in envs-validator
1 compromised version
- Jun 20, 2025
Malware in eshops-components-library
1 compromised version
- Jun 20, 2025
Malware in thunderbolt-features-loaders
1 compromised version
- Jun 20, 2025
Malware in rma-shared
1 compromised version
- Jun 20, 2025
Malware in somm-boilerplate
1 compromised version
- Jun 20, 2025
Malware in pfm-app
1 compromised version
- Jun 20, 2025
Malware in fwc-core
1 compromised version
- Jun 20, 2025
Malware in prismicio-types
1 compromised version
- Jun 20, 2025
Malware in rulai
1 compromised version
- Jun 20, 2025
Malware in cascading-picklists-extenstion
1 compromised version
Page 6273 of 7,293