Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,788 total · sorted newest first- Mar 13, 2025
Malicious code in mocha-dast-reporter (npm)
1 compromised version
- Mar 13, 2025
Malicious code in messaging-components (npm)
1 compromised version
- Mar 13, 2025
Malicious code in foundry-js-react-blueprint (npm)
1 compromised version
- Mar 13, 2025
Malicious code in paymentread-paypal (npm)
1 compromised version
- Mar 13, 2025
Malicious code in paymentlookup-paypal (npm)
1 compromised version
- Mar 13, 2025
Malicious code in invoiceread-paypal (npm)
1 compromised version
- Mar 13, 2025
Malicious code in @contraktor-tech/poc_confusion (npm)
1 compromised version
- Mar 13, 2025
Malicious code in notification-center-admin (npm)
1 compromised version
- Mar 12, 2025
Malicious code in tonetext (PyPI)
2 compromised versions
- Mar 12, 2025
Malicious code in auth-validator (npm)
- Mar 12, 2025
Malware in auth-validator
1 compromised version
- Mar 12, 2025
Malicious code in react-event-dependency (npm)
2 compromised versions
- Mar 12, 2025
Malware in react-event-dependency
1 compromised version
- Mar 12, 2025
Malicious code in empty-validator (npm)
- Mar 12, 2025
Malicious code in empty-array-validator (npm)
- Mar 12, 2025
Malicious code in array-empty-validator (npm)
- Mar 12, 2025
Malware in empty-validator
1 compromised version
- Mar 12, 2025
Malware in empty-array-validator
1 compromised version
- Mar 12, 2025
Malware in array-empty-validator
1 compromised version
- Mar 12, 2025
Malicious code in event-handle-package (npm)
- Mar 12, 2025
Malicious code in event-handle (npm)
- Mar 12, 2025
Malware in event-handle-package
1 compromised version
- Mar 12, 2025
Malware in event-handle
1 compromised version
- Mar 12, 2025
Malicious code in yoojae-validator (npm)
- Mar 12, 2025
Malicious code in icloud-xod (npm)
- Mar 12, 2025
Malware in icloud-xod
1 compromised version
- Mar 12, 2025
Malware in yoojae-validator
1 compromised version
- Mar 12, 2025
Malicious code in is-buffer-validator (npm)
- Mar 12, 2025
Malicious code in events-utils (npm)
- Mar 12, 2025
Malware in events-utils
1 compromised version
- Mar 12, 2025
Malware in is-buffer-validator
1 compromised version
- Mar 12, 2025
Malicious code in cfa-react-components (npm)
1 compromised version
- Mar 12, 2025
Malicious code in malwaretesting1 (npm)
1 compromised version
- Mar 12, 2025
Malicious code in malwaretesting (npm)
2 compromised versions
- Mar 12, 2025
Malicious code in malwaretest (npm)
5 compromised versions
- Mar 12, 2025
Malicious code in hybrid-frontend (npm)
1 compromised version
- Mar 12, 2025
Malicious code in bsee-shared-hmd (npm)
3 compromised versions
- Mar 12, 2025
Malicious code in actions-project-version-check (npm)
1 compromised version
- Mar 12, 2025
Malicious code in mern-ecom (npm)
- Mar 12, 2025
Malware in mern-ecom
1 compromised version
- Mar 12, 2025
Malicious code in mern-launcher (npm)
- Mar 12, 2025
Malware in mern-launcher
1 compromised version
- Mar 12, 2025
Malicious code in zaggletech (npm)
1 compromised version
- Mar 12, 2025
Malware in zaggletech
1 compromised version
- Mar 12, 2025
Malicious code in support-lib (npm)
11 compromised versions
- Mar 12, 2025
Malicious code in profile-ts (npm)
4 compromised versions
- Mar 12, 2025
Malicious code in company-ts (npm)
5 compromised versions
- Mar 12, 2025
Malware in support-lib
1 compromised version
- Mar 12, 2025
Malware in profile-ts
1 compromised version
- Mar 12, 2025
Malware in company-ts
1 compromised version
Page 6379 of 7,296