Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- May 5, 2025
Malicious code in wegenenverkeer (npm)
1 compromised version
- May 5, 2025
Malicious code in webcahep (npm)
- May 5, 2025
Malicious code in ui-cluster-driver-sks (npm)
1 compromised version
- May 5, 2025
Malicious code in rei-breakpoint-detector (npm)
1 compromised version
- May 5, 2025
Malicious code in substrate-faucet (npm)
1 compromised version
- May 5, 2025
Malicious code in placeholdr (npm)
1 compromised version
- May 5, 2025
Malicious code in poc_drakenkun (npm)
- May 5, 2025
Malicious code in landsat-tiler (npm)
1 compromised version
- May 5, 2025
Malicious code in gql-test-client (npm)
2 compromised versions
- May 5, 2025
Malicious code in fake-linter-no-schema (npm)
4 compromised versions
- May 5, 2025
Malicious code in eipsend (npm)
1 compromised version
- May 5, 2025
Malicious code in design-system-cmp (npm)
- May 5, 2025
Malicious code in earthdata-search (npm)
1 compromised version
- May 5, 2025
Malicious code in buidl-wallet-contracts (npm)
- May 5, 2025
Malicious code in arena-plm (npm)
2 compromised versions
- May 5, 2025
Malicious code in adobe-commerce-magento (npm)
- May 5, 2025
Malicious code in aspose (npm)
3 compromised versions
- May 5, 2025
Malicious code in amazon-seller-central (npm)
- May 5, 2025
Malicious code in @sdrosdzol_linkedin/husky (npm)
1 compromised version
- May 5, 2025
Malicious code in adp-workforce-now (npm)
3 compromised versions
- May 5, 2025
Malicious code in @styletime/eslint-config (npm)
- May 5, 2025
Malicious code in crypto-utility (npm)
1 compromised version
- May 5, 2025
Malicious code in @igain/react-app (npm)
2 compromised versions
- May 5, 2025
Malicious code in @mstrlibrary/rc-slider (npm)
- May 5, 2025
Malicious code in @ixm-apps/mf-admin-user (npm)
2 compromised versions
- May 5, 2025
Malicious code in @gfgtech/ui (npm)
2 compromised versions
- May 5, 2025
Malicious code in @ebay-business-components/marko-rum (npm)
2 compromised versions
- May 4, 2025
Malicious code in 0x-smart-contracts (npm)
1 compromised version
- May 4, 2025
Malicious code in font-impact (npm)
2 compromised versions
- May 4, 2025
Malicious code in msl-example-client (npm)
2 compromised versions
- May 4, 2025
Malicious code in crisp-import-conversations (npm)
1 compromised version
- May 3, 2025
Malicious code in @ringcx/agent-mfe-sdk (npm)
1 compromised version
- May 3, 2025
Malicious code in timsingapi (PyPI)
1 compromised version
- May 3, 2025
Malicious code in rblxfando (PyPI)
1 compromised version
- May 3, 2025
Malicious code in meowsapi (PyPI)
2 compromised versions
- May 3, 2025
Malicious code in ui-platform-elements (npm)
1 compromised version
- May 3, 2025
Malicious code in ui-platform-base-components-v2 (npm)
3 compromised versions
- May 3, 2025
Malicious code in client-utility-module (npm)
1 compromised version
- May 2, 2025
Malicious code in adobe-io-events (npm)
1 compromised version
- May 2, 2025
Malicious code in adobe-acrobat-sign (npm)
1 compromised version
- May 2, 2025
Malicious code in pydoxing (PyPI)
5 compromised versions
- May 2, 2025
Malicious code in aegis-contracts (npm)
1 compromised version
- May 2, 2025
Malicious code in ui-platform-business-elements (npm)
4 compromised versions
- May 2, 2025
Malicious code in component-modernizr (npm)
1 compromised version
- May 2, 2025
Malicious code in wasitestforeducation (npm)
1 compromised version
- May 2, 2025
Malicious code in twewewewest6 (npm)
1 compromised version
- May 2, 2025
Malicious code in sxg-playground (npm)
- May 2, 2025
Malicious code in swap-subgraph (npm)
1 compromised version
- May 2, 2025
Malicious code in smart-wallet-permissions (npm)
1 compromised version
- May 2, 2025
Malicious code in passkeys-integration (npm)
2 compromised versions
Page 6332 of 7,293