Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Apr 9, 2025
Malicious code in vite-plugin-monorepo (npm)
- Apr 9, 2025
Malware in vite-plugin-monorepo
1 compromised version
- Apr 9, 2025
Malicious code in unreal-engine-material-editor (npm)
1 compromised version
- Apr 9, 2025
Malware in unreal-engine-material-editor
1 compromised version
- Apr 9, 2025
Malicious code in some-error-logging-package (npm)
1 compromised version
- Apr 9, 2025
Malware in some-error-logging-package
1 compromised version
- Apr 9, 2025
Malicious code in sht-calculator-opener (npm)
5 compromised versions
- Apr 9, 2025
Malware in sht-calculator-opener
1 compromised version
- Apr 9, 2025
Malicious code in sharp-heic (npm)
- Apr 9, 2025
Malware in sharp-heic
1 compromised version
- Apr 9, 2025
Malicious code in scatterpie (npm)
1 compromised version
- Apr 9, 2025
Malware in scatterpie
1 compromised version
- Apr 9, 2025
Malicious code in phpseclib (npm)
1 compromised version
- Apr 9, 2025
Malware in phpseclib
1 compromised version
- Apr 9, 2025
Malware in nylas-apex-sdk
1 compromised version
- Apr 9, 2025
Malware in opsgeniewebhook
1 compromised version
- Apr 9, 2025
Malware in mattermost-developer-documentation
1 compromised version
- Apr 9, 2025
Malware in chaos-mesh-dashboard
1 compromised version
- Apr 9, 2025
Malware in cms-vue-boilerplate
1 compromised version
- Apr 9, 2025
Malicious code in neo4j-apoc-procedures (npm)
1 compromised version
- Apr 9, 2025
Malware in neo4j-apoc-procedures
1 compromised version
- Apr 9, 2025
Malicious code in neo4j-apoc (npm)
1 compromised version
- Apr 9, 2025
Malware in neo4j-apoc
1 compromised version
- Apr 9, 2025
Malicious code in mongoose-to-json (npm)
2 compromised versions
- Apr 9, 2025
Malware in mongoose-to-json
1 compromised version
- Apr 9, 2025
Malicious code in lme4 (npm)
1 compromised version
- Apr 9, 2025
Malicious code in domino-db (npm)
- Apr 9, 2025
Malware in lme4
1 compromised version
- Apr 9, 2025
Malware in domino-db
1 compromised version
- Apr 9, 2025
Malicious code in kalluabkl (npm)
- Apr 9, 2025
Malware in kalluabkl
1 compromised version
- Apr 9, 2025
Malicious code in highcharts-mouse-wheel-zoom (npm)
- Apr 9, 2025
Malware in highcharts-mouse-wheel-zoom
1 compromised version
- Apr 9, 2025
Malicious code in healenium-web (npm)
1 compromised version
- Apr 9, 2025
Malware in healenium-web
1 compromised version
- Apr 9, 2025
Malicious code in healenium-webdriverio (npm)
- Apr 9, 2025
Malware in healenium-webdriverio
1 compromised version
- Apr 9, 2025
Malicious code in flutter_cupertino_date_picker (npm)
1 compromised version
- Apr 9, 2025
Malware in flutter_cupertino_date_picker
1 compromised version
- Apr 9, 2025
Malicious code in fasteners (npm)
1 compromised version
- Apr 9, 2025
Malware in fasteners
1 compromised version
- Apr 9, 2025
Malicious code in dyalog-ride (npm)
- Apr 9, 2025
Malware in dyalog-ride
1 compromised version
- Apr 9, 2025
Malicious code in deltaprime (npm)
1 compromised version
- Apr 9, 2025
Malware in deltaprime
1 compromised version
- Apr 9, 2025
Malicious code in cors-jwt (npm)
- Apr 9, 2025
Malware in cors-jwt
1 compromised version
- Apr 9, 2025
Malicious code in data-memocombinators (npm)
1 compromised version
- Apr 9, 2025
Malware in data-memocombinators
1 compromised version
- Apr 9, 2025
Malicious code in wormhole-messenger-solana (npm)
Page 6345 of 7,293