Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- May 23, 2025
Malicious code in netvis (npm)
1 compromised version
- May 23, 2025
Malicious code in input_control_vis (npm)
1 compromised version
- May 23, 2025
Malicious code in hideoutpd (npm)
1 compromised version
- May 23, 2025
Malicious code in env-platform (npm)
1 compromised version
- May 23, 2025
Malware in hideoutpd
1 compromised version
- May 23, 2025
Malware in netvis
1 compromised version
- May 23, 2025
Malware in input_control_vis
1 compromised version
- May 23, 2025
Malware in env-platform
1 compromised version
- May 23, 2025
Malware in seatalk-rn-leave-calendar
1 compromised version
- May 23, 2025
Malicious code in xlog-admin-portal (npm)
1 compromised version
- May 23, 2025
Malicious code in tgi-fe (npm)
- May 23, 2025
Malicious code in tenslots (npm)
- May 23, 2025
Malicious code in sps (npm)
- May 23, 2025
Malicious code in sellyourvault (npm)
1 compromised version
- May 23, 2025
Malicious code in seacloud-database (npm)
1 compromised version
- May 23, 2025
Malicious code in refreshrewards (npm)
- May 23, 2025
Malicious code in react-xterm2 (npm)
2 compromised versions
- May 23, 2025
Malicious code in mysteryicons (npm)
1 compromised version
- May 23, 2025
Malicious code in mshop2 (npm)
1 compromised version
- May 23, 2025
Malicious code in kyutai-client (npm)
- May 23, 2025
Malicious code in garena-react-template-redux (npm)
1 compromised version
- May 23, 2025
Malicious code in garena-admin (npm)
- May 23, 2025
Malicious code in gacha-box (npm)
- May 23, 2025
Malicious code in estatement-fe (npm)
- May 23, 2025
Malicious code in datamart (npm)
1 compromised version
- May 23, 2025
Malicious code in coral-web-be (npm)
1 compromised version
- May 23, 2025
Malicious code in codeword (npm)
- May 23, 2025
Malicious code in bkeat-pytest (npm)
1 compromised version
- May 23, 2025
Malicious code in admin-id (npm)
1 compromised version
- May 23, 2025
Malware in admin-id
1 compromised version
- May 23, 2025
Malware in sellyourvault
1 compromised version
- May 23, 2025
Malware in mysteryicons
1 compromised version
- May 23, 2025
Malware in sps
1 compromised version
- May 23, 2025
Malware in gacha-box
1 compromised version
- May 23, 2025
Malware in mshop2
1 compromised version
- May 23, 2025
Malware in react-xterm2
1 compromised version
- May 23, 2025
Malware in kyutai-client
1 compromised version
- May 23, 2025
Malware in bkeat-pytest
1 compromised version
- May 23, 2025
Malware in garena-admin
1 compromised version
- May 23, 2025
Malware in tgi-fe
1 compromised version
- May 23, 2025
Malware in garena-react-template-redux
1 compromised version
- May 23, 2025
Malware in coral-web-be
1 compromised version
- May 23, 2025
Malware in seacloud-database
1 compromised version
- May 23, 2025
Malware in refreshrewards
1 compromised version
- May 23, 2025
Malware in xlog-admin-portal
1 compromised version
- May 23, 2025
Malware in estatement-fe
1 compromised version
- May 23, 2025
Malware in codeword
1 compromised version
- May 23, 2025
Malware in tenslots
1 compromised version
- May 23, 2025
Malware in datamart
1 compromised version
- May 23, 2025
Malicious code in url-project (npm)
1 compromised version
Page 6306 of 7,293