Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Jun 10, 2025
Malware in xsolla-pay2play-widget
1 compromised version
- Jun 10, 2025
Malware in opensearch-with-grafana-lambdas
1 compromised version
- Jun 10, 2025
Malicious code in smart-request-buffers (npm)
- Jun 10, 2025
Malware in smart-request-buffers
1 compromised version
- Jun 10, 2025
Malicious code in yt606060-utils (npm)
- Jun 10, 2025
Malware in yt606060-utils
1 compromised version
- Jun 10, 2025
Malicious code in vite-plugin-purify (npm)
- Jun 10, 2025
Malicious code in nextjs-insight (npm)
- Jun 10, 2025
Malware in nextjs-insight
1 compromised version
- Jun 10, 2025
Malware in vite-plugin-purify
1 compromised version
- Jun 10, 2025
Malicious code in vite-plugin-svgn (npm)
- Jun 10, 2025
Malware in vite-plugin-svgn
1 compromised version
- Jun 10, 2025
Malware in internal-lib-razor
1 compromised version
- Jun 10, 2025
Malicious code in quake-web (npm)
- Jun 10, 2025
Malicious code in bzl_components-lib (npm)
- Jun 10, 2025
Malicious code in @it-common/lbp_common (npm)
- Jun 10, 2025
Malware in bzl_components-lib
1 compromised version
- Jun 10, 2025
Malware in @it-common/lbp_common
1 compromised version
- Jun 10, 2025
Malware in quake-web
1 compromised version
- Jun 10, 2025
Malicious code in mockup-js-plugin (npm)
2 compromised versions
- Jun 10, 2025
Malware in mockup-js-plugin
1 compromised version
- Jun 10, 2025
Malicious code in react-intlist (npm)
2 compromised versions
- Jun 10, 2025
Malware in react-intlist
1 compromised version
- Jun 10, 2025
Malicious code in yux-utils (npm)
1 compromised version
- Jun 10, 2025
Malicious code in vyre-utils (npm)
1 compromised version
- Jun 10, 2025
Malicious code in fyre-utils (npm)
2 compromised versions
- Jun 10, 2025
Malware in vyre-utils
1 compromised version
- Jun 10, 2025
Malware in yux-utils
1 compromised version
- Jun 10, 2025
Malware in fyre-utils
1 compromised version
- Jun 10, 2025
Malicious code in transaction-data-generation (npm)
- Jun 10, 2025
Malware in transaction-data-generation
1 compromised version
- Jun 10, 2025
Malicious code in jsons-pack (npm)
- Jun 10, 2025
Malware in jsons-pack
1 compromised version
- Jun 10, 2025
Malicious code in express-jscookie (npm)
1 compromised version
- Jun 10, 2025
Malware in express-jscookie
1 compromised version
- Jun 10, 2025
Malicious code in gwnodejssectest1 (npm)
2 compromised versions
- Jun 10, 2025
Malware in gwnodejssectest1
1 compromised version
- Jun 10, 2025
Malware in eu.netherlands3d.address-search
1 compromised version
- Jun 10, 2025
Malicious code in zlib1g-dev (npm)
1 compromised version
- Jun 10, 2025
Malware in zlib1g-dev
1 compromised version
- Jun 10, 2025
Malicious code in winfsp (npm)
1 compromised version
- Jun 10, 2025
Malware in winfsp
1 compromised version
- Jun 10, 2025
Malicious code in whatwg-node (npm)
1 compromised version
- Jun 10, 2025
Malware in whatwg-node
1 compromised version
- Jun 10, 2025
Malicious code in waterline-mongo-native (npm)
1 compromised version
- Jun 10, 2025
Malware in waterline-mongo-native
1 compromised version
- Jun 10, 2025
Malicious code in uvicorn (npm)
1 compromised version
- Jun 10, 2025
Malware in uvicorn
1 compromised version
- Jun 10, 2025
Malicious code in undetected-chromedriver (npm)
1 compromised version
- Jun 10, 2025
Malware in undetected-chromedriver
1 compromised version
Page 6286 of 7,293