Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 28, 2025
Malicious code in passrdigitalportal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in lunasec-go-monorepo (npm)
1 compromised version
- Mar 28, 2025
Malicious code in luckydoge3 (npm)
1 compromised version
- Mar 28, 2025
Malicious code in loggercompanyab57ty (npm)
1 compromised version
- Mar 28, 2025
Malicious code in hibt-test (npm)
1 compromised version
- Mar 28, 2025
Malicious code in hibt-main (npm)
1 compromised version
- Mar 28, 2025
Malicious code in hibt-internal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in hibt-dev (npm)
1 compromised version
- Mar 28, 2025
Malicious code in grpc-js-repository (npm)
1 compromised version
- Mar 28, 2025
Malicious code in fullstory-lib (npm)
5 compromised versions
- Mar 28, 2025
Malicious code in fredman-file (npm)
3 compromised versions
- Mar 28, 2025
Malicious code in focc-commons-lib-backend-commons-node (npm)
1 compromised version
- Mar 28, 2025
Malicious code in ethers-providerz (npm)
3 compromised versions
- Mar 28, 2025
Malicious code in dt-adoptionoverview-extension (npm)
1 compromised version
- Mar 28, 2025
Malicious code in donateweb (npm)
1 compromised version
- Mar 28, 2025
Malicious code in cortex-net-nodex (npm)
1 compromised version
- Mar 28, 2025
Malicious code in connection-colaborator (npm)
1 compromised version
- Mar 28, 2025
Malicious code in coincheck-test (npm)
1 compromised version
- Mar 28, 2025
Malicious code in coincheck-main (npm)
1 compromised version
- Mar 28, 2025
Malicious code in coincheck-internal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in coincheck-dev (npm)
1 compromised version
- Mar 28, 2025
Malicious code in cloudflare-vite-tutorial (npm)
1 compromised version
- Mar 28, 2025
Malicious code in clay-c4 (npm)
1 compromised version
- Mar 28, 2025
Malicious code in cf-middleware-set-header (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bvox-test (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bvox-main (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bvox-internal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bvox-dev (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bvox (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bsbexample (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitvavo-test (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitvavo-main (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitvavo-internal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitvavo-dev (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitunix-test (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitunix-main (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitunix-internal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitunix-dev (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitrue-test (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitrue-main (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitrue-internal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitrue-dev (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bitrue (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bifinance-test (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bifinance-main (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bifinance-internal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in bifinance-dev (npm)
1 compromised version
- Mar 28, 2025
Malicious code in azbit-test (npm)
1 compromised version
- Mar 28, 2025
Malicious code in azbit-main (npm)
1 compromised version
- Mar 28, 2025
Malicious code in azbit-internal (npm)
1 compromised version
Page 6355 of 7,293