Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- May 21, 2025
Malware in gatsby-mars-pet-parent-journey--server
1 compromised version
- May 21, 2025
Malicious code in @walmart-dataventures/my-package (npm)
- May 21, 2025
Malware in @walmart-dataventures/my-package
1 compromised version
- May 21, 2025
Malware in @walmart-dataventures/integrated-components
1 compromised version
- May 21, 2025
Malicious code in node-wavehttp (npm)
1 compromised version
- May 21, 2025
Malicious code in axios-fingerprint (npm)
7 compromised versions
- May 21, 2025
Malware in axios-fingerprint
1 compromised version
- May 21, 2025
Malware in node-wavehttp
1 compromised version
- May 21, 2025
Malicious code in @ducksthegoatedone/ducks (npm)
- May 21, 2025
Malware in @ducksthegoatedone/ducks
1 compromised version
- May 21, 2025
Malicious code in loveisgood (npm)
- May 21, 2025
Malicious code in loveisalie (npm)
- May 21, 2025
Malware in loveisalie
1 compromised version
- May 21, 2025
Malware in loveisgood
1 compromised version
- May 21, 2025
Malicious code in loveisbad (npm)
- May 21, 2025
Malware in loveisbad
1 compromised version
- May 21, 2025
Malicious code in @shimosre/fingerprintjs (npm)
- May 21, 2025
Malware in @shimosre/fingerprintjs
1 compromised version
- May 21, 2025
Malicious code in react-youtube-dom (npm)
- May 21, 2025
Malware in react-youtube-dom
1 compromised version
- May 21, 2025
Malicious code in @confluence-classic/confluence-frontend-server (npm)
- May 21, 2025
Malicious code in @confluence-classic/confluence-authentication (npm)
- May 21, 2025
Malware in @igain/react-app
1 compromised version
- May 21, 2025
Malware in @confluence-classic/confluence-authentication
1 compromised version
- May 21, 2025
Malware in @confluence-classic/confluence-frontend-server
1 compromised version
- May 21, 2025
Malware in @ai-document-translation/ui-core
1 compromised version
- May 21, 2025
Malware in gx-npm-messenger-util
1 compromised version
- May 21, 2025
Malware in ias-dashboard-assets
1 compromised version
- May 21, 2025
Malware in adobe-appmeasurement
1 compromised version
- May 21, 2025
Malicious code in victim-project (npm)
- May 21, 2025
Malicious code in company-utils (npm)
- May 21, 2025
Malware in victim-project
1 compromised version
- May 21, 2025
Malware in company-utils
1 compromised version
- May 21, 2025
Malicious code in web3walletconnet (npm)
- May 21, 2025
Malicious code in web3walletconnect (npm)
- May 21, 2025
Malicious code in web3automation (npm)
1 compromised version
- May 21, 2025
Malicious code in selfbott-rpc (npm)
1 compromised version
- May 21, 2025
Malicious code in selfbot-v2 (npm)
1 compromised version
- May 21, 2025
Malicious code in selfbot-v1 (npm)
1 compromised version
- May 21, 2025
Malicious code in selfbot-test-2 (npm)
1 compromised version
- May 21, 2025
Malicious code in selfbot-rpc (npm)
1 compromised version
- May 21, 2025
Malicious code in rpc-selffbottt (npm)
1 compromised version
- May 21, 2025
Malicious code in rpc-selffbott (npm)
1 compromised version
- May 21, 2025
Malicious code in rpc-selffbot (npm)
1 compromised version
- May 21, 2025
Malicious code in rpc-selfbottt (npm)
1 compromised version
- May 21, 2025
Malicious code in rpc-selfbot-v10 (npm)
- May 21, 2025
Malicious code in rpc-selfb0t (npm)
3 compromised versions
- May 21, 2025
Malware in rpc-selffbot
1 compromised version
- May 21, 2025
Malware in rpc-selfbot-v10
1 compromised version
- May 21, 2025
Malware in rpc-selfbottt
1 compromised version
Page 6313 of 7,293