Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,857 total · sorted newest first- Mar 14, 2025
Malicious code in newland-component (npm)
- Mar 14, 2025
Malicious code in dingpengtest-ui (npm)
- Mar 14, 2025
Malicious code in dingpeng-ui (npm)
- Mar 14, 2025
Malware in dingpeng-ui
1 compromised version
- Mar 14, 2025
Malware in vue-plugin-rely2
1 compromised version
- Mar 14, 2025
Malware in dingpengtest-ui
1 compromised version
- Mar 14, 2025
Malware in newland-component-test
1 compromised version
- Mar 14, 2025
Malware in newland-component
1 compromised version
- Mar 14, 2025
Malware in vue-plugin-rely1
1 compromised version
- Mar 14, 2025
Malware in newland-digitization-ui
1 compromised version
- Mar 14, 2025
Malicious code in ding123123131 (npm)
- Mar 14, 2025
Malware in ding123123131
1 compromised version
- Mar 14, 2025
Malware in doitoml
1 compromised version
- Mar 14, 2025
Malicious code in spark-botkit-servicenow (npm)
1 compromised version
- Mar 14, 2025
Malware in spark-botkit-servicenow
1 compromised version
- Mar 14, 2025
Malicious code in winston-js (npm)
- Mar 14, 2025
Malicious code in rekilog (npm)
- Mar 14, 2025
Malicious code in react-rekilog (npm)
- Mar 14, 2025
Malware in rekilog
1 compromised version
- Mar 14, 2025
Malware in react-rekilog
1 compromised version
- Mar 14, 2025
Malware in winston-js
1 compromised version
- Mar 14, 2025
Malicious code in cclr-huge-ui (npm)
3 compromised versions
- Mar 14, 2025
Malicious code in ccl-utilities (npm)
1 compromised version
- Mar 14, 2025
Malware in ccl-utilities
1 compromised version
- Mar 14, 2025
Malware in cclr-huge-ui
1 compromised version
- Mar 14, 2025
Malicious code in build-toolchain (npm)
- Mar 14, 2025
Malicious code in app-bridge-next (npm)
- Mar 14, 2025
Malicious code in @sp4b-dev/test-utils (npm)
- Mar 14, 2025
Malware in app-bridge-next
1 compromised version
- Mar 14, 2025
Malware in @sp4b-dev/test-utils
1 compromised version
- Mar 14, 2025
Malware in build-toolchain
1 compromised version
- Mar 14, 2025
Malware in webbundle-plugins
1 compromised version
- Mar 14, 2025
Malicious code in user-paypal (npm)
1 compromised version
- Mar 14, 2025
Malicious code in tsl-select-trigger (npm)
6 compromised versions
- Mar 14, 2025
Malicious code in tsl-card-body (npm)
7 compromised versions
- Mar 14, 2025
Malicious code in tfjs-layers (npm)
106 compromised versions
- Mar 14, 2025
Malicious code in tfjs-data (npm)
- Mar 14, 2025
Malicious code in tfjs-core (npm)
107 compromised versions
- Mar 14, 2025
Malicious code in process-tick (npm)
- Mar 14, 2025
Malicious code in paypal-logger (npm)
102 compromised versions
- Mar 14, 2025
Malicious code in oauth2-paypal (npm)
- Mar 14, 2025
Malicious code in hellojpd (npm)
- Mar 14, 2025
Malicious code in gl-emoji-version (npm)
- Mar 14, 2025
Malicious code in fnd-validation (npm)
1 compromised version
- Mar 14, 2025
Malicious code in eslint-config-dx (npm)
1 compromised version
- Mar 14, 2025
Malicious code in data-ui-v (npm)
- Mar 14, 2025
Malicious code in airbnb-jitney-schemas (npm)
- Mar 14, 2025
Malicious code in airbnb-bootstrap-data (npm)
- Mar 14, 2025
Malware in data-ui-v
1 compromised version
- Mar 14, 2025
Malware in eslint-config-dx
1 compromised version
Page 6377 of 7,298