Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 27, 2025
Malicious code in test-utils-bundle (npm)
1 compromised version
- Mar 27, 2025
Malicious code in crash-handler (npm)
1 compromised version
- Mar 27, 2025
Malware in test-utils-bundle
1 compromised version
- Mar 27, 2025
Malware in crash-handler
1 compromised version
- Mar 26, 2025
Malicious code in webhooks-contacts-app (npm)
2 compromised versions
- Mar 26, 2025
Malicious code in nylas-apex-sdk (npm)
1 compromised version
- Mar 26, 2025
Malicious code in ethers-provider2 (npm)
1 compromised version
- Mar 26, 2025
Malware in ethers-provider2
1 compromised version
- Mar 26, 2025
Malicious code in eslint-config-hectorm (npm)
14 compromised versions
- Mar 26, 2025
Malicious code in bagayaluzqdl159 (npm)
1 compromised version
- Mar 25, 2025
Malicious code in zqdllqdz15975321 (npm)
1 compromised version
- Mar 25, 2025
Malicious code in quicolor (PyPI)
10 compromised versions
- Mar 25, 2025
Malicious code in quickcolors (PyPI)
1 compromised version
- Mar 25, 2025
Malicious code in coloryi (PyPI)
1 compromised version
- Mar 25, 2025
Malicious code in node-clog (npm)
- Mar 25, 2025
Malicious code in consolidate-logger (npm)
3 compromised versions
- Mar 25, 2025
Malicious code in consolidate-log (npm)
3 compromised versions
- Mar 25, 2025
Malicious code in cln-logger (npm)
- Mar 25, 2025
Malware in consolidate-log
1 compromised version
- Mar 25, 2025
Malware in cln-logger
1 compromised version
- Mar 25, 2025
Malware in consolidate-logger
1 compromised version
- Mar 25, 2025
Malware in node-clog
1 compromised version
- Mar 25, 2025
Malicious code in yxt-fe-center (npm)
2 compromised versions
- Mar 25, 2025
Malware in yxt-fe-center
1 compromised version
- Mar 25, 2025
Malicious code in xverginia4u (npm)
7 compromised versions
- Mar 25, 2025
Malware in xverginia4u
1 compromised version
- Mar 25, 2025
Malicious code in malicious_model (npm)
- Mar 25, 2025
Malware in malicious_model
1 compromised version
- Mar 25, 2025
Malicious code in zimu-deploy (npm)
- Mar 25, 2025
Malicious code in loglo (npm)
- Mar 25, 2025
Malware in zimu-deploy
1 compromised version
- Mar 25, 2025
Malware in loglo
1 compromised version
- Mar 25, 2025
Malicious code in internallib_v72 (npm)
- Mar 25, 2025
Malware in internallib_v72
1 compromised version
- Mar 25, 2025
Malicious code in react-fiber-debugger (npm)
1 compromised version
- Mar 25, 2025
Malware in react-fiber-debugger
1 compromised version
- Mar 25, 2025
Malicious code in realtime-solar-system (npm)
1 compromised version
- Mar 25, 2025
Malicious code in hahahahahahahahahahah (npm)
1 compromised version
- Mar 25, 2025
Malware in materialxtest
1 compromised version
- Mar 25, 2025
Malware in hahahahahahahahahahah
1 compromised version
- Mar 25, 2025
Malware in realtime-solar-system
1 compromised version
- Mar 25, 2025
Malicious code in telescopetest1 (npm)
- Mar 25, 2025
Malicious code in nw.gui (npm)
3 compromised versions
- Mar 25, 2025
Malicious code in newtheme (npm)
- Mar 25, 2025
Malicious code in miro-terms-banner-s3-uploader (npm)
- Mar 25, 2025
Malicious code in gson-server (npm)
- Mar 25, 2025
Malicious code in awesome-camera (npm)
- Mar 25, 2025
Malware in telescopetest1
1 compromised version
- Mar 25, 2025
Malware in awesome-camera
1 compromised version
- Mar 25, 2025
Malware in miro-terms-banner-s3-uploader
1 compromised version
Page 6359 of 7,293