Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Jun 12, 2025
Malicious code in cosmy-wasmy (npm)
1 compromised version
- Jun 12, 2025
Malicious code in console-color-nodejs (npm)
- Jun 12, 2025
Malicious code in cim-validation-form (npm)
- Jun 12, 2025
Malicious code in @biovia/amd-loader (npm)
- Jun 12, 2025
Malicious code in @jito-lab/provider (npm)
- Jun 12, 2025
Malicious code in dep_test_for_mal (npm)
- Jun 12, 2025
Malicious code in asf-core (npm)
- Jun 12, 2025
Malicious code in cycle-a (npm)
- Jun 12, 2025
Malicious code in 0vulns-dependency-confusion-poc (npm)
1 compromised version
- Jun 12, 2025
Malicious code in zora-wallet-core (npm)
- Jun 12, 2025
Malicious code in zora-wallet (npm)
- Jun 12, 2025
Malicious code in zora-hooks (npm)
- Jun 12, 2025
Malicious code in zora-auth (npm)
- Jun 12, 2025
Malicious code in zora-analytics (npm)
- Jun 12, 2025
Malicious code in hijack_publish (npm)
- Jun 12, 2025
Malware in uniswap-v4-scratchpad-poc
1 compromised version
- Jun 12, 2025
Malware in hijack_publish
1 compromised version
- Jun 12, 2025
Malware in zora-analytics
1 compromised version
- Jun 12, 2025
Malware in zora-utils-core
1 compromised version
- Jun 12, 2025
Malware in zora-hooks
1 compromised version
- Jun 12, 2025
Malware in zora-wallet-core
1 compromised version
- Jun 12, 2025
Malware in zora-wallet
1 compromised version
- Jun 12, 2025
Malware in zora-auth
1 compromised version
- Jun 12, 2025
Malware in test-victim
1 compromised version
- Jun 12, 2025
Malicious code in test-victim (npm)
1 compromised version
- Jun 12, 2025
Malicious code in zora-utils-core (npm)
2 compromised versions
- Jun 12, 2025
Malicious code in dojo.aspect (npm)
1 compromised version
- Jun 12, 2025
Malicious code in cmp-spid-login (npm)
5 compromised versions
- Jun 12, 2025
Malicious code in web3-socketio (npm)
2 compromised versions
- Jun 12, 2025
Malicious code in solanautil (npm)
4 compromised versions
- Jun 12, 2025
Malware in solanautil
1 compromised version
- Jun 12, 2025
Malware in web3-socketio
1 compromised version
- Jun 12, 2025
Malicious code in husky-es (npm)
- Jun 12, 2025
Malware in husky-es
1 compromised version
- Jun 12, 2025
Malicious code in uniswap-v4-scratchpad-poc (npm)
1 compromised version
- Jun 12, 2025
Malicious code in puppeteer-proxy-http (npm)
- Jun 12, 2025
Malicious code in iclpacket (npm)
- Jun 12, 2025
Malware in puppeteer-proxy-http
1 compromised version
- Jun 12, 2025
Malware in iclpacket
1 compromised version
- Jun 12, 2025
Malicious code in volehai-poc (npm)
1 compromised version
- Jun 12, 2025
Malicious code in ccip-resolver (npm)
- Jun 12, 2025
Malicious code in @dm3-org/dm3-lib-crypto (npm)
- Jun 12, 2025
Malicious code in sendgrid-bloodhound (npm)
2 compromised versions
- Jun 12, 2025
Malicious code in puppeteer-proxy-https (npm)
3 compromised versions
- Jun 12, 2025
Malware in puppeteer-proxy-https
1 compromised version
- Jun 12, 2025
Malicious code in bs58-encrypt-utils (npm)
- Jun 12, 2025
Malware in bs58-encrypt-utils
1 compromised version
- Jun 12, 2025
Malicious code in os-apps-ui-curvelibrary (npm)
14 compromised versions
- Jun 11, 2025
Malicious code in mtrtestinglalalal (npm)
- Jun 11, 2025
Malicious code in frontend-tests (npm)
6 compromised versions
Page 6282 of 7,293