Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- May 27, 2025
Malware in athira-darwin-x64
1 compromised version
- May 27, 2025
Malware in microbundle-starter
1 compromised version
- May 27, 2025
Malware in skinnyvans-linux-x64
1 compromised version
- May 27, 2025
Malware in thira
1 compromised version
- May 27, 2025
Malware in skinnyvans
1 compromised version
- May 27, 2025
Malware in skinnyvans-windows-arm64
1 compromised version
- May 27, 2025
Malware in skinnyvans-windows-x64
1 compromised version
- May 27, 2025
Malware in skinnyvans-linux-arm64
1 compromised version
- May 27, 2025
Malware in skinnyvans-darwin-x64
1 compromised version
- May 27, 2025
Malware in athira-linux-arm64
1 compromised version
- May 27, 2025
Malicious code in nistagram (npm)
- May 27, 2025
Malware in nistagram
1 compromised version
- May 27, 2025
Malicious code in interview-coder-v1 (npm)
- May 27, 2025
Malware in interview-coder-v1
1 compromised version
- May 27, 2025
Malicious code in react_code_format (npm)
6 compromised versions
- May 27, 2025
Malicious code in eslint-format (npm)
9 compromised versions
- May 27, 2025
Malware in react_code_format
1 compromised version
- May 27, 2025
Malware in eslint-format
1 compromised version
- May 27, 2025
Malware in @okdev/boiler_plate
1 compromised version
- May 27, 2025
Malicious code in mockup-js (npm)
- May 27, 2025
Malware in mockup-js
1 compromised version
- May 27, 2025
Malicious code in trip-plugins (npm)
- May 27, 2025
Malware in trip-plugins
1 compromised version
- May 27, 2025
Malicious code in support-plugins (npm)
- May 27, 2025
Malware in support-plugins
1 compromised version
- May 27, 2025
Malicious code in stylelist-plugins (npm)
- May 27, 2025
Malware in stylelist-plugins
1 compromised version
- May 27, 2025
Malicious code in wise-plugins (npm)
- May 27, 2025
Malware in wise-plugins
1 compromised version
- May 27, 2025
Malicious code in zeal-plugins (npm)
- May 27, 2025
Malware in zeal-plugins
1 compromised version
- May 27, 2025
Malicious code in resize-plugins (npm)
- May 27, 2025
Malware in resize-plugins
1 compromised version
- May 27, 2025
Malicious code in wrap-plugins (npm)
- May 27, 2025
Malware in wrap-plugins
1 compromised version
- May 27, 2025
Malicious code in setting-plugins (npm)
- May 27, 2025
Malware in setting-plugins
1 compromised version
- May 27, 2025
Malicious code in vite-plugin-style-svg (npm)
- May 27, 2025
Malicious code in logbin-nodejs (npm)
- May 27, 2025
Malware in vite-plugin-style-svg
1 compromised version
- May 27, 2025
Malware in logbin-nodejs
1 compromised version
- May 27, 2025
Malicious code in yellow-plugins (npm)
- May 27, 2025
Malware in yellow-plugins
1 compromised version
- May 27, 2025
Malicious code in recover-plugins (npm)
- May 27, 2025
Malware in recover-plugins
1 compromised version
- May 27, 2025
Malicious code in vite-tsconfig-pretty (npm)
- May 27, 2025
Malicious code in vite-config-pretty-js (npm)
- May 27, 2025
Malware in vite-config-pretty-js
1 compromised version
- May 27, 2025
Malware in vite-tsconfig-pretty
1 compromised version
- May 27, 2025
Malicious code in style-beautify-plugins (npm)
Page 6299 of 7,293