Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,884 total · sorted newest first- Mar 17, 2025
Malware in ramp-tax-info-ui
1 compromised version
- Mar 17, 2025
Malicious code in career-craft (npm)
1 compromised version
- Mar 17, 2025
Malware in career-craft
1 compromised version
- Mar 17, 2025
Malicious code in probe.gl-monorepo (npm)
1 compromised version
- Mar 17, 2025
Malware in ocular-monorepo
1 compromised version
- Mar 17, 2025
Malware in probe.gl-monorepo
1 compromised version
- Mar 17, 2025
Malicious code in usedin1calculatedmember.js (npm)
1 compromised version
- Mar 17, 2025
Malicious code in usedin1calculatedmember (npm)
3 compromised versions
- Mar 17, 2025
Malicious code in calculated_members_message.js (npm)
5 compromised versions
- Mar 17, 2025
Malware in calculated_members_message.js
1 compromised version
- Mar 17, 2025
Malware in usedin1calculatedmember
1 compromised version
- Mar 17, 2025
Malware in calculated_members_message
1 compromised version
- Mar 17, 2025
Malware in usedin1calculatedmember.js
1 compromised version
- Mar 17, 2025
Malicious code in node-llama-cpp-project (npm)
- Mar 17, 2025
Malicious code in ear-gui-portal (npm)
- Mar 17, 2025
Malicious code in antilles-portal (npm)
- Mar 17, 2025
Malware in node-llama-cpp-project
1 compromised version
- Mar 17, 2025
Malware in ear-gui-portal
1 compromised version
- Mar 17, 2025
Malware in antilles-portal
1 compromised version
- Mar 17, 2025
Malicious code in skinport-plus (npm)
- Mar 17, 2025
Malicious code in panmirror (npm)
- Mar 17, 2025
Malicious code in luigi-core-private (npm)
- Mar 17, 2025
Malicious code in dexter-monitor (npm)
- Mar 17, 2025
Malicious code in contaxy-webapp (npm)
- Mar 17, 2025
Malware in contaxy-webapp
1 compromised version
- Mar 17, 2025
Malware in aem-maven-archetype
1 compromised version
- Mar 17, 2025
Malware in unms-server
1 compromised version
- Mar 17, 2025
Malware in dexter-server
1 compromised version
- Mar 17, 2025
Malware in luigi-core-private
1 compromised version
- Mar 17, 2025
Malware in dexter-monitor
1 compromised version
- Mar 17, 2025
Malware in react-fixtures
1 compromised version
- Mar 17, 2025
Malware in azure-boards-estimate
1 compromised version
- Mar 17, 2025
Malware in skinport-plus
1 compromised version
- Mar 17, 2025
Malware in product-custom-grid-columns
1 compromised version
- Mar 17, 2025
Malware in panmirror
1 compromised version
- Mar 17, 2025
Malware in ark-boostrap
1 compromised version
- Mar 17, 2025
Malicious code in snap-design-system-marketing (npm)
3 compromised versions
- Mar 17, 2025
Malicious code in digitabell (npm)
1 compromised version
- Mar 17, 2025
Malware in ad-creative-preview
1 compromised version
- Mar 17, 2025
Malware in digitabell
1 compromised version
- Mar 17, 2025
Malware in snap-design-system-marketing
1 compromised version
- Mar 17, 2025
Malware in fullscreenify
1 compromised version
- Mar 17, 2025
Malware in @sonahri51/orientation-change-end
1 compromised version
- Mar 17, 2025
Malicious code in @financials/using-dep-conf (npm)
- Mar 17, 2025
Malicious code in @financials/ui-components (npm)
- Mar 17, 2025
Malware in @financials/ui-components
1 compromised version
- Mar 17, 2025
Malware in @financials/using-dep-conf
1 compromised version
- Mar 16, 2025
Malicious code in assert_cmd (npm)
1 compromised version
- Mar 16, 2025
Malicious code in ionicaiosampleapp (npm)
1 compromised version
- Mar 16, 2025
Malicious code in devpod (npm)
1 compromised version
Page 6376 of 7,298