Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- May 22, 2025
Malicious code in pumptoolforvolumeandcomment (npm)
- May 22, 2025
Malware in pumptoolforvolumeandcomment
1 compromised version
- May 22, 2025
Malicious code in debugdogs (npm)
- May 22, 2025
Malware in debugdogs
1 compromised version
- May 22, 2025
Malicious code in node-telegram-utils (npm)
- May 22, 2025
Malicious code in node-telegram-util (npm)
- May 22, 2025
Malicious code in node-telegram-bots-api (npm)
1 compromised version
- May 22, 2025
Malware in node-telegram-bots-api
1 compromised version
- May 22, 2025
Malware in node-telegram-util
1 compromised version
- May 22, 2025
Malware in node-telegram-utils
1 compromised version
- May 22, 2025
Malicious code in icloud-sod (npm)
4 compromised versions
- May 22, 2025
Malware in icloud-sod
1 compromised version
- May 22, 2025
Malicious code in rest-icon-orchestrator (npm)
- May 22, 2025
Malicious code in rest-api-orchestrator (npm)
- May 22, 2025
Malware in rest-icon-orchestrator
1 compromised version
- May 22, 2025
Malware in rest-api-orchestrator
1 compromised version
- May 22, 2025
Malicious code in react-native-scrollpageviewtest (npm)
- May 22, 2025
Malware in react-native-scrollpageviewtest
1 compromised version
- May 22, 2025
Malicious code in n8n-nodes-zalo-user (npm)
- May 22, 2025
Malware in n8n-nodes-zalo-user
1 compromised version
- May 22, 2025
Malicious code in cryptopay-button (npm)
22 compromised versions
- May 22, 2025
Malware in cryptopay-button
1 compromised version
- May 22, 2025
Malicious code in vue-vibe (npm)
- May 22, 2025
Malicious code in axios.js (npm)
- May 22, 2025
Malware in axios.js
1 compromised version
- May 22, 2025
Malware in vue-vibe
1 compromised version
- May 22, 2025
Malicious code in pdfgenei (npm)
1 compromised version
- May 22, 2025
Malware in pdfgenei
1 compromised version
- May 21, 2025
Malware in zas-design-system
1 compromised version
- May 21, 2025
Malware in placeholdr
1 compromised version
- May 21, 2025
Malware in dave-common
1 compromised version
- May 21, 2025
Malicious code in solsniperbyagave (npm)
1 compromised version
- May 21, 2025
Malware in solsniperbyagave
1 compromised version
- May 21, 2025
Malicious code in keypair-encrypt-utils (npm)
- May 21, 2025
Malware in keypair-encrypt-utils
1 compromised version
- May 21, 2025
Malicious code in ultimatepower (npm)
1 compromised version
- May 21, 2025
Malicious code in migrate-lol-account (npm)
1 compromised version
- May 21, 2025
Malicious code in lolnews (npm)
- May 21, 2025
Malicious code in lol-rp-raffle (npm)
- May 21, 2025
Malicious code in lol-ninegacha (npm)
1 compromised version
- May 21, 2025
Malicious code in lol-lux-shopping-mall (npm)
- May 21, 2025
Malicious code in iterationplan (npm)
1 compromised version
- May 21, 2025
Malicious code in core_plugin_route_timeouts (npm)
1 compromised version
- May 21, 2025
Malicious code in core_plugin_b (npm)
- May 21, 2025
Malicious code in cdn-fe (npm)
1 compromised version
- May 21, 2025
Malicious code in blackfriday2 (npm)
- May 21, 2025
Malware in cdn-fe
1 compromised version
- May 21, 2025
Malware in blackfriday2
1 compromised version
- May 21, 2025
Malware in core_plugin_b
1 compromised version
- May 21, 2025
Malware in lol-ninegacha
1 compromised version
Page 6310 of 7,293