Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Feb 3, 2025
Malicious code in @tui-react-mobile/app-bar (npm)
50 compromised versions
- Feb 3, 2025
Malicious code in @transmit-security/rbac (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @toloka-annotation-studio/app (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @test6uy767/back-end (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @sn4k-s3c/call-home (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @smt-front/analytics (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @sanchezcoding/fetchs (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in @persona-builder/client (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @orange-team/map-rank-tracker-frontend (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @mrpudidi/gravatar (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in @metrics-service/static (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in @marfeel/eslint-config-node (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @infoserver/gov-shared-connections (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @im-dims/bail (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @haysee/v5.2 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @goodsoftware/analytics-for-confluence-client (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @epic-ecp/types (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @electra-web/settings-menu (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @electra-web/common (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @electra-web/bitrate-switcher (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @douinfe/semi-theme-default (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @douinfe/semi-illustrations (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @douinfe/semi-icons (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @douinfe/semi-foundation (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @douinfe/semi-d2c-typings (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @douinfe/semi-animation-styled (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @bughunter_99/webpack-demo-2 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @alaska-its/design-tokens (npm)
1 compromised version
- Feb 3, 2025
Malicious code in @al-ui/useappinsights (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in @aftersale/react-eva (npm)
1 compromised version
- Feb 3, 2025
Malicious code in zapier-shops-orders (npm)
- Feb 3, 2025
Malicious code in webhook-example-coinbase-commerce-node (npm)
- Feb 3, 2025
Malicious code in web3-onboard-sandbox (npm)
- Feb 3, 2025
Malicious code in type-on-strap (npm)
- Feb 3, 2025
Malicious code in ton-payment-channels-example (npm)
- Feb 3, 2025
Malicious code in ton-examples (npm)
- Feb 3, 2025
Malicious code in solana-graphql-playground (npm)
- Feb 3, 2025
Malicious code in sol-wallet-adapter-example (npm)
- Feb 3, 2025
Malicious code in pyre2 (npm)
- Feb 3, 2025
Malicious code in ppcp-starter-node (npm)
- Feb 3, 2025
Malicious code in paypal-react-donation (npm)
- Feb 3, 2025
Malicious code in paypal-js-advanced-integration-ib (npm)
- Feb 3, 2025
Malicious code in navigation-blocking (npm)
- Feb 3, 2025
Malicious code in moonpay-websdk-buy (npm)
- Feb 3, 2025
Malicious code in link_paidy (npm)
- Feb 3, 2025
Malicious code in lge-example (npm)
- Feb 3, 2025
Malicious code in lazy-loading-router-provider (npm)
- Feb 3, 2025
Malicious code in l10nmessages-website (npm)
- Feb 3, 2025
Malicious code in ib-ai-react (npm)
- Feb 3, 2025
Malicious code in firehose-poc-client (npm)
Page 6419 of 7,293