Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- May 23, 2025
Malicious code in jitsi-meet-sdk (npm)
2 compromised versions
- May 23, 2025
Malicious code in creditkarma-us (npm)
1 compromised version
- May 23, 2025
Malicious code in child-youth-promotion-banner (npm)
1 compromised version
- May 23, 2025
Malicious code in cardbuild (npm)
1 compromised version
- May 23, 2025
Malicious code in badoo-frontend (npm)
1 compromised version
- May 23, 2025
Malware in payment-gateway-internal
1 compromised version
- May 23, 2025
Malware in badoo-frontend
1 compromised version
- May 23, 2025
Malware in cardbuild
1 compromised version
- May 23, 2025
Malware in mtfe_cos_track
1 compromised version
- May 23, 2025
Malware in atlaskit-registry
1 compromised version
- May 23, 2025
Malware in user-auth-prod
1 compromised version
- May 23, 2025
Malware in creditkarma-us
1 compromised version
- May 23, 2025
Malware in child-youth-promotion-banner
1 compromised version
- May 23, 2025
Malware in jitsi-meet-sdk
1 compromised version
- May 23, 2025
Malicious code in sudapam (npm)
- May 23, 2025
Malicious code in leetrjohn (npm)
- May 23, 2025
Malicious code in leaderjohn (npm)
- May 23, 2025
Malware in sudapam
1 compromised version
- May 23, 2025
Malware in leaderjohn
1 compromised version
- May 23, 2025
Malware in leetrjohn
1 compromised version
- May 23, 2025
Malicious code in upyun-uploader (npm)
- May 23, 2025
Malicious code in prettier-config-rth (npm)
- May 23, 2025
Malware in upyun-uploader
1 compromised version
- May 23, 2025
Malware in prettier-config-rth
1 compromised version
- May 23, 2025
Malicious code in rth-host-helper (npm)
- May 23, 2025
Malicious code in eslint-config-rth (npm)
- May 23, 2025
Malware in eslint-config-rth
1 compromised version
- May 23, 2025
Malware in rth-host-helper
1 compromised version
- May 23, 2025
Malicious code in makitest_npm (npm)
- May 23, 2025
Malware in makitest_npm
1 compromised version
- May 23, 2025
Malicious code in zdauth (npm)
- May 23, 2025
Malicious code in seatable (npm)
1 compromised version
- May 23, 2025
Malicious code in rapper-wish (npm)
- May 23, 2025
Malicious code in raffle-node (npm)
- May 23, 2025
Malicious code in performance-appraisal (npm)
- May 23, 2025
Malicious code in mix-hub-web (npm)
- May 23, 2025
Malicious code in index_patterns_test_plugin (npm)
1 compromised version
- May 23, 2025
Malicious code in gop_status_frontend (npm)
1 compromised version
- May 23, 2025
Malicious code in credit-risk (npm)
- May 23, 2025
Malicious code in chromastore (npm)
- May 23, 2025
Malicious code in choosetreasure (npm)
- May 23, 2025
Malicious code in 12octsportsday (npm)
- May 23, 2025
Malware in mix-hub-web
1 compromised version
- May 23, 2025
Malware in credit-risk
1 compromised version
- May 23, 2025
Malware in 12octsportsday
1 compromised version
- May 23, 2025
Malware in raffle-node
1 compromised version
- May 23, 2025
Malware in zdauth
1 compromised version
- May 23, 2025
Malware in index_patterns_test_plugin
1 compromised version
- May 23, 2025
Malware in gop_status_frontend
1 compromised version
- May 23, 2025
Malware in rapper-wish
1 compromised version
Page 6304 of 7,293