Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,834 total · sorted newest first- Mar 14, 2025
Malicious code in topper-docs (npm)
1 compromised version
- Mar 14, 2025
Malicious code in redux-debounce-example (npm)
1 compromised version
- Mar 14, 2025
Malicious code in razorpaysalesdemo (npm)
1 compromised version
- Mar 14, 2025
Malware in secureshield4
1 compromised version
- Mar 14, 2025
Malware in redux-debounce-example
1 compromised version
- Mar 14, 2025
Malware in topper-docs
1 compromised version
- Mar 14, 2025
Malware in razorpaysalesdemo
1 compromised version
- Mar 14, 2025
Malicious code in smart-power-strip (npm)
2 compromised versions
- Mar 14, 2025
Malicious code in reason-calculator (npm)
1 compromised version
- Mar 14, 2025
Malicious code in new-nav-docusaurus-2-2 (npm)
1 compromised version
- Mar 14, 2025
Malicious code in elementor-editor-github-actions (npm)
1 compromised version
- Mar 14, 2025
Malicious code in apache-superset-docs (npm)
1 compromised version
- Mar 14, 2025
Malware in reason-calculator
1 compromised version
- Mar 14, 2025
Malware in new-nav-docusaurus-2-2
1 compromised version
- Mar 14, 2025
Malware in apache-superset-docs
1 compromised version
- Mar 14, 2025
Malware in elementor-editor-github-actions
1 compromised version
- Mar 14, 2025
Malware in smart-power-strip
1 compromised version
- Mar 14, 2025
Malware in @c11-lib-ts/document-handler
1 compromised version
- Mar 14, 2025
Malicious code in remix-run-route (npm)
- Mar 14, 2025
Malware in remix-run-route
1 compromised version
- Mar 14, 2025
Malicious code in request-draft-ui (npm)
2 compromised versions
- Mar 14, 2025
Malicious code in digits-electron-src (npm)
3 compromised versions
- Mar 14, 2025
Malicious code in digits-common (npm)
3 compromised versions
- Mar 14, 2025
Malware in digits-electron-src
1 compromised version
- Mar 14, 2025
Malware in digits-common
1 compromised version
- Mar 14, 2025
Malware in request-draft-ui
1 compromised version
- Mar 14, 2025
Malicious code in workfront-tailwind-base (npm)
3 compromised versions
- Mar 14, 2025
Malicious code in trafficking (npm)
2 compromised versions
- Mar 14, 2025
Malicious code in kamino-modules (npm)
2 compromised versions
- Mar 14, 2025
Malicious code in hoist-non-react (npm)
2 compromised versions
- Mar 14, 2025
Malware in workfront-tailwind-base
1 compromised version
- Mar 14, 2025
Malware in hoist-non-react
1 compromised version
- Mar 14, 2025
Malware in kamino-modules
1 compromised version
- Mar 14, 2025
Malware in trafficking
1 compromised version
- Mar 14, 2025
Malicious code in workfront-twind (npm)
10 compromised versions
- Mar 14, 2025
Malware in workfront-twind
1 compromised version
- Mar 14, 2025
Malware in single-spa-workfront
1 compromised version
- Mar 14, 2025
Malicious code in visitor-targeting (npm)
3 compromised versions
- Mar 14, 2025
Malicious code in @od-react/od-react-test (npm)
3 compromised versions
- Mar 14, 2025
Malware in @od-react/od-react-test
1 compromised version
- Mar 14, 2025
Malware in visitor-targeting
1 compromised version
- Mar 14, 2025
Malicious code in small-ct (npm)
1 compromised version
- Mar 14, 2025
Malware in small-ct
1 compromised version
- Mar 14, 2025
Malicious code in secureshield1 (npm)
1 compromised version
- Mar 14, 2025
Malware in secureshield1
1 compromised version
- Mar 14, 2025
Malicious code in xeno-client (npm)
5 compromised versions
- Mar 14, 2025
Malicious code in scriptconfig (npm)
7 compromised versions
- Mar 14, 2025
Malware in scriptconfig
1 compromised version
- Mar 14, 2025
Malware in xeno-client
1 compromised version
- Mar 14, 2025
Malicious code in postprocesstree-addon (npm)
2 compromised versions
Page 6378 of 7,297