Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- May 6, 2025
Malicious code in arduinounit (npm)
1 compromised version
- May 6, 2025
Malware in arduinounit
1 compromised version
- May 6, 2025
Malicious code in make-plural-rules (npm)
1 compromised version
- May 6, 2025
Malware in make-plural-rules
1 compromised version
- May 6, 2025
Malicious code in jade-browserify (npm)
1 compromised version
- May 6, 2025
Malware in jade-browserify
1 compromised version
- May 6, 2025
Malicious code in sails-mssql-adapter (npm)
1 compromised version
- May 6, 2025
Malware in sails-mssql-adapter
1 compromised version
- May 6, 2025
Malicious code in meteor-roles (npm)
1 compromised version
- May 6, 2025
Malware in meteor-roles
1 compromised version
- May 6, 2025
Malicious code in apache-httpclient (npm)
1 compromised version
- May 6, 2025
Malware in apache-httpclient
1 compromised version
- May 6, 2025
Malicious code in scheme-latin-1-transcoder (npm)
1 compromised version
- May 6, 2025
Malware in scheme-latin-1-transcoder
1 compromised version
- May 6, 2025
Malicious code in awetz (npm)
11 compromised versions
- May 6, 2025
Malware in awetz
1 compromised version
- May 6, 2025
Malicious code in vite-plugin-remove (npm)
1 compromised version
- May 6, 2025
Malware in vite-plugin-remove
1 compromised version
- May 6, 2025
Malicious code in shaderc (npm)
1 compromised version
- May 6, 2025
Malware in shaderc
1 compromised version
- May 6, 2025
Malicious code in node-jwt-simple (npm)
1 compromised version
- May 6, 2025
Malware in node-jwt-simple
1 compromised version
- May 6, 2025
Malicious code in wdio-healenium-service (npm)
1 compromised version
- May 6, 2025
Malware in wdio-healenium-service
1 compromised version
- May 6, 2025
Malicious code in vite-plugin-node-modules-polyfills (npm)
1 compromised version
- May 6, 2025
Malware in vite-plugin-node-modules-polyfills
1 compromised version
- May 6, 2025
Malicious code in haml-jst-loader (npm)
1 compromised version
- May 6, 2025
Malware in haml-jst-loader
1 compromised version
- May 6, 2025
Malicious code in flashcanvas (npm)
1 compromised version
- May 6, 2025
Malware in flashcanvas
1 compromised version
- May 6, 2025
Malicious code in use-videos (npm)
- May 6, 2025
Malicious code in lucide-node (npm)
- May 6, 2025
Malware in lucide-node
1 compromised version
- May 6, 2025
Malware in use-videos
1 compromised version
- May 6, 2025
Malicious code in kidding (npm)
1 compromised version
- May 6, 2025
Malware in kidding
1 compromised version
- May 6, 2025
Malicious code in windows-api-codec-pack (npm)
1 compromised version
- May 6, 2025
Malware in windows-api-codec-pack
1 compromised version
- May 6, 2025
Malicious code in sharpgl (npm)
1 compromised version
- May 6, 2025
Malware in sharpgl
1 compromised version
- May 6, 2025
Malware in concurrent-hashmap
1 compromised version
- May 6, 2025
Malicious code in mock-arduino (npm)
1 compromised version
- May 6, 2025
Malware in mock-arduino
1 compromised version
- May 5, 2025
Malicious code in zas-design-system (npm)
4 compromised versions
- May 5, 2025
Malicious code in sophs-test-package-test5 (npm)
- May 5, 2025
Malicious code in world-id-discord (npm)
1 compromised version
- May 5, 2025
Malicious code in feather-provider-filter (npm)
2 compromised versions
- May 5, 2025
Malicious code in lrc20-js-sdk (npm)
1 compromised version
- May 5, 2025
Malicious code in m0m0x01d (npm)
48 compromised versions
- May 5, 2025
Malicious code in fatfingers-vroooom (npm)
1 compromised version
Page 6331 of 7,293