Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,435 total · sorted newest first- May 23, 2025
Malware in koishi-plugin-majjan-nanikiri
1 compromised version
- May 23, 2025
Malicious code in next-config-log (npm)
- May 23, 2025
Malware in next-config-log
1 compromised version
- May 23, 2025
Malicious code in feature-runtime (npm)
- May 23, 2025
Malware in feature-runtime
1 compromised version
- May 23, 2025
Malicious code in utility-capsule (npm)
- May 23, 2025
Malicious code in plugin-helper (npm)
- May 23, 2025
Malicious code in package-meta-resolver (npm)
- May 23, 2025
Malicious code in eslint-typescript-runtime-check (npm)
- May 23, 2025
Malware in eslint-config-airbnb-compat
1 compromised version
- May 23, 2025
Malware in eslint-typescript-runtime-check
1 compromised version
- May 23, 2025
Malware in plugin-helper
1 compromised version
- May 23, 2025
Malware in package-meta-resolver
1 compromised version
- May 23, 2025
Malware in utility-capsule
1 compromised version
- May 23, 2025
Malicious code in feng-npm-test666 (npm)
2 compromised versions
- May 23, 2025
Malware in feng-npm-test666
1 compromised version
- May 23, 2025
Malicious code in transaction-generations (npm)
- May 23, 2025
Malware in transaction-generations
1 compromised version
- May 23, 2025
Malicious code in pdfplumber (npm)
2 compromised versions
- May 23, 2025
Malicious code in gatsby-plugin-source-map (npm)
- May 23, 2025
Malware in tree-sitter-your-language
1 compromised version
- May 23, 2025
Malware in pdfplumber
1 compromised version
- May 23, 2025
Malware in gatsby-plugin-source-map
1 compromised version
- May 23, 2025
Malicious code in zzr-react-custom-widget (npm)
- May 23, 2025
Malicious code in my-check-inline-loader-plugin (npm)
- May 23, 2025
Malware in my-check-inline-loader-plugin
1 compromised version
- May 23, 2025
Malware in zzr-react-custom-widget
1 compromised version
- May 23, 2025
Malicious code in greetpk (npm)
- May 23, 2025
Malicious code in fs-path-info (npm)
- May 23, 2025
Malicious code in btcjs-lib (npm)
4 compromised versions
- May 23, 2025
Malware in btcjs-lib
1 compromised version
- May 23, 2025
Malware in greetpk
1 compromised version
- May 23, 2025
Malware in fs-path-info
1 compromised version
- May 23, 2025
Malicious code in mockup-plugin (npm)
3 compromised versions
- May 23, 2025
Malware in mockup-plugin
1 compromised version
- May 23, 2025
Malicious code in internalwkl-1 (npm)
5 compromised versions
- May 23, 2025
Malware in internalwkl-1
1 compromised version
- May 23, 2025
Malicious code in giftcards (npm)
- May 23, 2025
Malicious code in gcfront (npm)
- May 23, 2025
Malicious code in fc-card-overview (npm)
1 compromised version
- May 23, 2025
Malicious code in fc-accordion (npm)
1 compromised version
- May 23, 2025
Malicious code in document-list-extra-questions (npm)
1 compromised version
- May 23, 2025
Malicious code in client-microsite-reactjs-controls (npm)
1 compromised version
- May 23, 2025
Malicious code in client-file-manager-module (npm)
1 compromised version
- May 23, 2025
Malicious code in client-controls-module (npm)
1 compromised version
- May 23, 2025
Malicious code in client-authentication-module (npm)
1 compromised version
- May 23, 2025
Malware in fc-accordion
1 compromised version
- May 23, 2025
Malware in client-controls-module
1 compromised version
- May 23, 2025
Malware in giftcards
1 compromised version
- May 23, 2025
Malware in fc-card-overview
1 compromised version
Page 6319 of 7,309