Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 28, 2025
Malicious code in azbit-dev (npm)
1 compromised version
- Mar 28, 2025
Malicious code in azbit (npm)
1 compromised version
- Mar 28, 2025
Malicious code in arkose-labs-react-native-example (npm)
2 compromised versions
- Mar 28, 2025
Malicious code in aem-generated-project (npm)
1 compromised version
- Mar 28, 2025
Malicious code in across-package-test2 (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @vercel-internals/tsconfig (npm)
2 compromised versions
- Mar 28, 2025
Malicious code in @vercel-internals/constants (npm)
2 compromised versions
- Mar 28, 2025
Malicious code in @uniqa/user-preferences-ms-spec-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/user-account-spec-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/ubimet-ms (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/self-service-ms-api-v2 (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/self-service-ms-api-v1 (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/self-registration-spec-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/security-code-ms-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/sales-ms-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/reef (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/partner-masterdata-integration-ms-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/health-claim-ms-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/document-ms-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/digital-inventory-ms-spec-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/device-mgmt-ms-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/customer-masterdata-ms (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/customer-loyalty-ms-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/contract-ms-spec-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/contract-answers-ms-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa/claims-ms-api (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa-extern/capacitor-plugin-unblu (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @uniqa-extern/capacitor-plugin-kofax (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @instant-messengers/vk-teams-bridge (npm)
1 compromised version
- Mar 28, 2025
Malicious code in @domons/test123 (npm)
1 compromised version
- Mar 28, 2025
Malicious code in ilovingcats (npm)
- Mar 28, 2025
Malware in ilovingcats
1 compromised version
- Mar 28, 2025
Malicious code in transactions-generator (npm)
- Mar 28, 2025
Malicious code in coin-address-validation (npm)
- Mar 28, 2025
Malware in coin-address-validation
1 compromised version
- Mar 28, 2025
Malware in transactions-generator
1 compromised version
- Mar 28, 2025
Malicious code in safe-package-winrar (npm)
- Mar 28, 2025
Malware in safe-package-winrar
1 compromised version
- Mar 28, 2025
Malicious code in react-html2pdf.js (npm)
- Mar 28, 2025
Malware in react-html2pdf.js
1 compromised version
- Mar 28, 2025
Malicious code in shipmenttrackingserv-paypal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in shipmentdetails-paypal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in riskchallengeserv-paypal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in pplinkpath (npm)
1 compromised version
- Mar 28, 2025
Malicious code in postp2ptxnserv (npm)
1 compromised version
- Mar 28, 2025
Malicious code in invoicetax-paypal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in identitydocumentserv-multipart-paypal (npm)
1 compromised version
- Mar 28, 2025
Malicious code in contactbookmgmtserv (npm)
1 compromised version
- Mar 28, 2025
Malware in militaty-geza-blessed2025hondo
1 compromised version
- Mar 28, 2025
Malware in contactbookmgmtserv
1 compromised version
Page 6356 of 7,293