Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Feb 3, 2025
Malicious code in hoppscotch-sh-admin (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in google-fonts-to-wordpress-collection (npm)
1 compromised version
- Feb 3, 2025
Malicious code in githubpagessites (npm)
1 compromised version
- Feb 3, 2025
Malicious code in geronimopkgv2 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in geronimopkg (npm)
1 compromised version
- Feb 3, 2025
Malicious code in gbc-viewer (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in fixnlhybrid (npm)
1 compromised version
- Feb 3, 2025
Malicious code in expense-management (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in epic-ue-i18n (npm)
1 compromised version
- Feb 3, 2025
Malicious code in epic-ue-darkly (npm)
1 compromised version
- Feb 3, 2025
Malicious code in elgato-webhid-jaas-demo (npm)
1 compromised version
- Feb 3, 2025
Malicious code in discord.js-dmall-friends-v11 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in dgxeon-sokets (npm)
1 compromised version
- Feb 3, 2025
Malicious code in dependency-confusion-poc-ay (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in deneme-renklerim (npm)
1 compromised version
- Feb 3, 2025
Malicious code in dealer-portal (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in cx-logger-library (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in command-plugins (npm)
1 compromised version
- Feb 3, 2025
Malicious code in cokiee-test (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in check-slip-chii (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in cdc-chatbot (npm)
1 compromised version
- Feb 3, 2025
Malicious code in cassadasdasdasdwad (npm)
1 compromised version
- Feb 3, 2025
Malicious code in buildaurora (npm)
1 compromised version
- Feb 3, 2025
Malicious code in build-test-utilities (npm)
1 compromised version
- Feb 3, 2025
Malicious code in bootstrapper-solara (npm)
1 compromised version
- Feb 3, 2025
Malicious code in blockly-examples (npm)
1 compromised version
- Feb 3, 2025
Malicious code in bengececipaketimdebu (npm)
1 compromised version
- Feb 3, 2025
Malicious code in bar_lib (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in baileys-dgxeon (npm)
1 compromised version
- Feb 3, 2025
Malicious code in aurorabuilder (npm)
1 compromised version
- Feb 3, 2025
Malicious code in anton-downloader (npm)
1 compromised version
- Feb 3, 2025
Malicious code in analytics-search (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in analytics-passive-tracker (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in analytics-omniture-constants (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in analytics-merge-beacons (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in analytics-end-of-page (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in analytics-bp-passive-tracker-loader (npm)
6 compromised versions
- Feb 3, 2025
Malicious code in analytics-biscuit-tin (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in akamai-edgeworkers-cli (npm)
1 compromised version
- Feb 3, 2025
Malicious code in airflow-www (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in adobe-dcapi-web2 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in adobe-dcapi-web (npm)
5 compromised versions
- Feb 3, 2025
Malicious code in addons-pm (npm)
1 compromised version
- Feb 3, 2025
Malicious code in ad_language_monitor_appscript (npm)
1 compromised version
- Feb 3, 2025
Malicious code in aaaa89852889 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @wfps/wfps-common-lib (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in @volcenjine/veplayer (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @volcenjine/vegame (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @vk-tech-solar/config (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in @twork-mw/display-mode (npm)
50 compromised versions
Page 6418 of 7,293