Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- May 23, 2025
Malware in com.unity.cluster-display
1 compromised version
- May 23, 2025
Malware in com.unity.code-analysis
1 compromised version
- May 23, 2025
Malware in com.unity.jobs
1 compromised version
- May 23, 2025
Malware in com.unity.renderstreaming
1 compromised version
- May 23, 2025
Malware in @sl4x0/internal-package
1 compromised version
- May 23, 2025
Malware in com.unity.hlod
1 compromised version
- May 22, 2025
Malicious code in nb-tsconfig (npm)
- May 22, 2025
Malicious code in vishal-plugin-flipper (npm)
- May 22, 2025
Malicious code in starknet-types-07 (npm)
2 compromised versions
- May 22, 2025
Malicious code in random-dupa-test-1 (npm)
2 compromised versions
- May 22, 2025
Malware in starknet-types-07
1 compromised version
- May 22, 2025
Malware in random-dupa-test-1
1 compromised version
- May 22, 2025
Malicious code in primereact-sass-theme (npm)
- May 22, 2025
Malicious code in twilio-realtime-frontend (npm)
1 compromised version
- May 22, 2025
Malicious code in trueye-component-library (npm)
5 compromised versions
- May 22, 2025
Malicious code in test-hello-user-test-npm-com-test (npm)
1 compromised version
- May 22, 2025
Malicious code in tadbir-se (npm)
1 compromised version
- May 22, 2025
Malicious code in t43est-hello-user-test-npm-com-test (npm)
1 compromised version
- May 22, 2025
Malicious code in supplier-common-ui (npm)
2 compromised versions
- May 22, 2025
Malicious code in skeleton-buffer (npm)
2 compromised versions
- May 22, 2025
Malicious code in singlewire-components (npm)
2 compromised versions
- May 22, 2025
Malicious code in shimmer_placeholder (npm)
1 compromised version
- May 22, 2025
Malicious code in sechub-website (npm)
1 compromised version
- May 22, 2025
Malicious code in qasj (npm)
1 compromised version
- May 22, 2025
Malicious code in pulse-candidate (npm)
1 compromised version
- May 22, 2025
Malicious code in pragmatic-drag-and-drop (npm)
1 compromised version
- May 22, 2025
Malicious code in porrtal-workspace (npm)
1 compromised version
- May 22, 2025
Malicious code in o-date (npm)
1 compromised version
- May 22, 2025
Malicious code in matter_build_action (npm)
1 compromised version
- May 22, 2025
Malicious code in manage-this (npm)
1 compromised version
- May 22, 2025
Malicious code in hypernova-simple-example (npm)
1 compromised version
- May 22, 2025
Malicious code in hello-user-test-npm-com-test (npm)
2 compromised versions
- May 22, 2025
Malicious code in gs-uitk-set-utils (npm)
4 compromised versions
- May 22, 2025
Malicious code in gs-uitk-promise-utils (npm)
3 compromised versions
- May 22, 2025
Malicious code in gs-uitk-analytics-common (npm)
4 compromised versions
- May 22, 2025
Malicious code in gs-pwm-utilities (npm)
4 compromised versions
- May 22, 2025
Malicious code in gs-pwm-ooba (npm)
2 compromised versions
- May 22, 2025
Malicious code in glovers-acquisition (npm)
1 compromised version
- May 22, 2025
Malicious code in genesys-lib (npm)
1 compromised version
- May 22, 2025
Malicious code in gatsby-theme-newrelic (npm)
1 compromised version
- May 22, 2025
Malicious code in cryptotax (npm)
1 compromised version
- May 22, 2025
Malicious code in cosmos-multisig-ui (npm)
1 compromised version
- May 22, 2025
Malicious code in cloud-pipeline-run (npm)
1 compromised version
- May 22, 2025
Malicious code in calling-extensions-sdk-demo-minimal-js (npm)
1 compromised version
- May 22, 2025
Malicious code in browser-tests (npm)
1 compromised version
- May 22, 2025
Malicious code in bitcoinjs-lib-v5 (npm)
2 compromised versions
- May 22, 2025
Malicious code in bc-swipe-fade (npm)
1 compromised version
- May 22, 2025
Malicious code in atg-store-addons (npm)
1 compromised version
- May 22, 2025
Malicious code in atg-breakpoints (npm)
1 compromised version
- May 22, 2025
Malicious code in asdfghjklzxcvbnmmnbvcx (npm)
3 compromised versions
Page 6308 of 7,293