Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 25, 2025
Malicious code in vistar-ad-clienttestadv4 (npm)
1 compromised version
- Mar 25, 2025
Malicious code in vistar-ad-clienttestadv3 (npm)
1 compromised version
- Mar 25, 2025
Malicious code in vistar-ad-clienttestadv2 (npm)
1 compromised version
- Mar 25, 2025
Malware in vistar-ad-clienttestadv3
1 compromised version
- Mar 25, 2025
Malware in vistar-ad-clienttestadv2
1 compromised version
- Mar 25, 2025
Malware in vistar-ad-clienttestadv4
1 compromised version
- Mar 25, 2025
Malicious code in truchuhhbuh (npm)
- Mar 25, 2025
Malicious code in test-module-example (npm)
- Mar 25, 2025
Malware in test-module-example
1 compromised version
- Mar 25, 2025
Malware in truchuhhbuh
1 compromised version
- Mar 25, 2025
Malicious code in standard-demo (npm)
1 compromised version
- Mar 25, 2025
Malware in standard-demo
1 compromised version
- Mar 25, 2025
Malware in sdxcode1
1 compromised version
- Mar 25, 2025
Malware in migrate-npm-registry
1 compromised version
- Mar 25, 2025
Malware in nmp-frontend-libraries
1 compromised version
- Mar 25, 2025
Malicious code in maga-ai (npm)
- Mar 25, 2025
Malicious code in gaimes-fun (npm)
- Mar 25, 2025
Malware in gaimes-fun
1 compromised version
- Mar 25, 2025
Malware in maga-ai
1 compromised version
- Mar 25, 2025
Malicious code in kagi_browser_ext (npm)
1 compromised version
- Mar 25, 2025
Malware in hdhh.hiijack
1 compromised version
- Mar 25, 2025
Malware in kagi_browser_ext
1 compromised version
- Mar 25, 2025
Malware in bcoin-full
1 compromised version
- Mar 25, 2025
Malware in mx-exchange-docs
1 compromised version
- Mar 25, 2025
Malware in faucet-microservice
1 compromised version
- Mar 25, 2025
Malicious code in gui_v2 (npm)
1 compromised version
- Mar 25, 2025
Malicious code in generate_genesis_values (npm)
1 compromised version
- Mar 25, 2025
Malicious code in asset_cli_tool (npm)
- Mar 25, 2025
Malware in electron_npm_deps
1 compromised version
- Mar 25, 2025
Malware in lookerbot
1 compromised version
- Mar 25, 2025
Malware in asset_cli_tool
1 compromised version
- Mar 25, 2025
Malware in generate_genesis_values
1 compromised version
- Mar 25, 2025
Malware in gui_v2
1 compromised version
- Mar 25, 2025
Malicious code in mathjax-v3 (npm)
2 compromised versions
- Mar 25, 2025
Malicious code in mathjax-v2 (npm)
- Mar 25, 2025
Malicious code in formio-plugin-offline (npm)
- Mar 25, 2025
Malicious code in eslint-plugin-lexical (npm)
- Mar 25, 2025
Malware in eslint-plugin-cdp-project
1 compromised version
- Mar 25, 2025
Malware in mathjax-v2
1 compromised version
- Mar 25, 2025
Malware in eslint-plugin-lexical
1 compromised version
- Mar 25, 2025
Malware in formio-plugin-offline
1 compromised version
- Mar 25, 2025
Malware in mathjax-v3
1 compromised version
- Mar 25, 2025
Malicious code in intercomexpo (npm)
1 compromised version
- Mar 25, 2025
Malicious code in datahub-react-web (npm)
1 compromised version
- Mar 25, 2025
Malware in datahub-react-web
1 compromised version
- Mar 25, 2025
Malware in intercomexpo
1 compromised version
- Mar 25, 2025
Malicious code in blockzie-vm (npm)
- Mar 25, 2025
Malicious code in blockzie-link (npm)
- Mar 25, 2025
Malicious code in blockzie-gui (npm)
- Mar 25, 2025
Malware in blockzie-gui
1 compromised version
Page 6363 of 7,293