Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- May 23, 2025
Malware in choosetreasure
1 compromised version
- May 23, 2025
Malware in performance-appraisal
1 compromised version
- May 23, 2025
Malware in seatable
1 compromised version
- May 23, 2025
Malware in chromastore
1 compromised version
- May 23, 2025
Malicious code in template-vite (npm)
1 compromised version
- May 23, 2025
Malicious code in bkwebportal (npm)
1 compromised version
- May 23, 2025
Malicious code in appium-rn-id (npm)
1 compromised version
- May 23, 2025
Malware in template-vite
1 compromised version
- May 23, 2025
Malware in bkwebportal
1 compromised version
- May 23, 2025
Malware in appium-rn-id
1 compromised version
- May 23, 2025
Malware in flipper-plugins
1 compromised version
- May 23, 2025
Malicious code in inhouse-root (npm)
1 compromised version
- May 23, 2025
Malicious code in hermes-inspector-msggen (npm)
1 compromised version
- May 23, 2025
Malicious code in event-sharing-demo (npm)
1 compromised version
- May 23, 2025
Malicious code in e-learning-garena (npm)
1 compromised version
- May 23, 2025
Malware in event-sharing-demo
1 compromised version
- May 23, 2025
Malware in hermes-inspector-msggen
1 compromised version
- May 23, 2025
Malware in inhouse-root
1 compromised version
- May 23, 2025
Malware in e-learning-garena
1 compromised version
- May 23, 2025
Malicious code in wsticket (npm)
- May 23, 2025
Malicious code in mbm-dgacha (npm)
- May 23, 2025
Malicious code in gunbazaar (npm)
- May 23, 2025
Malicious code in data-portal-dwh-apps-fe (npm)
- May 23, 2025
Malicious code in all-star-2019 (npm)
- May 23, 2025
Malware in wsticket
1 compromised version
- May 23, 2025
Malware in mbm-dgacha
1 compromised version
- May 23, 2025
Malware in data-portal-dwh-apps-fe
1 compromised version
- May 23, 2025
Malware in gunbazaar
1 compromised version
- May 23, 2025
Malware in all-star-2019
1 compromised version
- May 23, 2025
Malicious code in web-ssar (npm)
1 compromised version
- May 23, 2025
Malicious code in team-portal (npm)
1 compromised version
- May 23, 2025
Malicious code in sfc-demo (npm)
- May 23, 2025
Malicious code in seamless-sppmy (npm)
1 compromised version
- May 23, 2025
Malicious code in routing-config (npm)
- May 23, 2025
Malicious code in osd_tp_custom_visualizations (npm)
- May 23, 2025
Malicious code in dof-ff (npm)
1 compromised version
- May 23, 2025
Malicious code in customer-center (npm)
1 compromised version
- May 23, 2025
Malicious code in arcademinigame (npm)
1 compromised version
- May 23, 2025
Malicious code in accumulate-win (npm)
- May 23, 2025
Malware in arcademinigame
1 compromised version
- May 23, 2025
Malware in accumulate-win
1 compromised version
- May 23, 2025
Malware in seamless-sppmy
1 compromised version
- May 23, 2025
Malware in web-ssar
1 compromised version
- May 23, 2025
Malware in osd_tp_custom_visualizations
1 compromised version
- May 23, 2025
Malware in team-portal
1 compromised version
- May 23, 2025
Malware in routing-config
1 compromised version
- May 23, 2025
Malware in customer-center
1 compromised version
- May 23, 2025
Malware in sfc-demo
1 compromised version
- May 23, 2025
Malware in dof-ff
1 compromised version
- May 23, 2025
Malicious code in seatalk-rn-leave-calendar (npm)
1 compromised version
Page 6305 of 7,293