Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- May 8, 2025
Malicious code in @dm3-org/dm3-lib-shared (npm)
1 compromised version
- May 8, 2025
Malicious code in @ltcp/ui (npm)
1 compromised version
- May 8, 2025
Malicious code in @cewe-phoenix-themes/default-theme (npm)
1 compromised version
- May 8, 2025
Malicious code in @walmart-dataventures/integrated-components (npm)
3 compromised versions
- May 8, 2025
Malicious code in @sage-org/fabric-ui-root-config (npm)
2 compromised versions
- May 8, 2025
Malicious code in airmason-employee (npm)
1 compromised version
- May 7, 2025
Malicious code in @flcore/login (npm)
2 compromised versions
- May 7, 2025
Malicious code in albatross-test2-module (npm)
1 compromised version
- May 7, 2025
Malicious code in @chat-components/common (npm)
2 compromised versions
- May 7, 2025
Malicious code in r2-ui (npm)
1 compromised version
- May 7, 2025
Malicious code in antani-ui (npm)
1 compromised version
- May 7, 2025
Malicious code in superhero-turnip (npm)
1 compromised version
- May 7, 2025
Malicious code in yandex-lego (npm)
1 compromised version
- May 7, 2025
Malicious code in gx-npm-messenger-util (npm)
1 compromised version
- May 7, 2025
Malicious code in ias-dashboard-assets (npm)
1 compromised version
- May 7, 2025
Malicious code in adobe-appmeasurement (npm)
1 compromised version
- May 7, 2025
Malicious code in @ai-document-translation/ui-core (npm)
1 compromised version
- May 7, 2025
Malicious code in internal-lib-t1 (npm)
5 compromised versions
- May 7, 2025
Malicious code in ascpc-npm-example (npm)
- May 7, 2025
Malware in ascpc-npm-example
1 compromised version
- May 7, 2025
Malware in internal-lib-t1
1 compromised version
- May 7, 2025
Malicious code in identityaccesspointsrv (npm)
1 compromised version
- May 7, 2025
Malware in identityaccesspointsrv
1 compromised version
- May 7, 2025
Malware in @di-sdk/quickselect-wasm
1 compromised version
- May 7, 2025
Malicious code in @starkgate/web (npm)
- May 7, 2025
Malicious code in @oracle-cx-commerce/commerce-utils (npm)
- May 7, 2025
Malicious code in @klarna-travel-platform/travel-booking-shared-types (npm)
1 compromised version
- May 7, 2025
Malicious code in @johndeere-tech/helios-ng-components (npm)
1 compromised version
- May 7, 2025
Malicious code in @johndeere-tech/eslint-plugin-timbercloud-custom-rules (npm)
1 compromised version
- May 7, 2025
Malware in @oracle-cx-commerce/commerce-utils
1 compromised version
- May 7, 2025
Malware in @starkgate/web
1 compromised version
- May 7, 2025
Malware in @johndeere-tech/helios-styles
1 compromised version
- May 7, 2025
Malware in @johndeere-tech/eslint-plugin-timbercloud-custom-rules
1 compromised version
- May 7, 2025
Malware in @acesso-io/genoma-ui
1 compromised version
- May 7, 2025
Malware in @johndeere-tech/helios-ng-components
1 compromised version
- May 7, 2025
Malware in @johndeere-tech/helios-mat-styles
1 compromised version
- May 7, 2025
Malware in @klarna-travel-platform/travel-booking-shared-types
1 compromised version
- May 7, 2025
Malware in echo-color
1 compromised version
- May 7, 2025
Malware in substrate-faucet
1 compromised version
- May 7, 2025
Malicious code in @joshcyber123/frontend-logger (npm)
2 compromised versions
- May 7, 2025
Malware in @joshcyber123/frontend-logger
1 compromised version
- May 7, 2025
Malicious code in poc-malicious-sim (npm)
6 compromised versions
- May 7, 2025
Malware in poc-npm-hooks
1 compromised version
- May 7, 2025
Malware in poc-malicious-sim
1 compromised version
- May 7, 2025
Malware in poc-sim
1 compromised version
- May 7, 2025
Malware in discord-vc-manager
1 compromised version
- May 7, 2025
Malicious code in log-task (npm)
- May 7, 2025
Malware in log-task
1 compromised version
- May 7, 2025
Malicious code in krnl-cli (npm)
- May 7, 2025
Malicious code in create-krnl-app (npm)
Page 6328 of 7,293