Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Feb 7, 2025
Malicious code in growthbook-app (npm)
1 compromised version
- Feb 7, 2025
Malicious code in etsy.github.io (npm)
1 compromised version
- Feb 7, 2025
Malware in growthbook-app
1 compromised version
- Feb 7, 2025
Malware in etsy.github.io
1 compromised version
- Feb 7, 2025
Malicious code in internallib_v331 (npm)
1 compromised version
- Feb 7, 2025
Malware in internallib_v331
1 compromised version
- Feb 7, 2025
Malicious code in internallib_v666 (npm)
1 compromised version
- Feb 7, 2025
Malicious code in internallib_v185 (npm)
1 compromised version
- Feb 7, 2025
Malware in internallib_v185
1 compromised version
- Feb 7, 2025
Malware in internallib_v666
1 compromised version
- Feb 7, 2025
Malicious code in react-scripts-win (npm)
9 compromised versions
- Feb 7, 2025
Malware in react-scripts-win
1 compromised version
- Feb 7, 2025
Malware in bigcommerce.github.io
1 compromised version
- Feb 7, 2025
Malware in dell.github.io
1 compromised version
- Feb 7, 2025
Malicious code in fluencelabs.github.io (npm)
1 compromised version
- Feb 7, 2025
Malware in mathworks.github.io
1 compromised version
- Feb 7, 2025
Malware in apple.github.io
1 compromised version
- Feb 7, 2025
Malware in fluencelabs.github.io
1 compromised version
- Feb 7, 2025
Malicious code in slack-azure-notifier (npm)
1 compromised version
- Feb 7, 2025
Malware in slack-azure-notifier
1 compromised version
- Feb 5, 2025
Malicious code in pxz (PyPI)
14 compromised versions
- Feb 5, 2025
Malicious code in nflx-metaflow (PyPI)
2 compromised versions
- Feb 5, 2025
Malicious code in lightgboost (PyPI)
4 compromised versions
- Feb 5, 2025
Malicious code in inkpy-jinja (PyPI)
1 compromised version
- Feb 5, 2025
Malicious code in hellohackers (PyPI)
1 compromised version
- Feb 4, 2025
Malicious code in farooq4321 (PyPI)
1 compromised version
- Feb 4, 2025
Malicious code in requests-x64 (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in libhash-js (npm)
- Feb 3, 2025
Malware in libhash-js
1 compromised version
- Feb 3, 2025
Malicious code in x-tree-view (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in web3-trade (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in u-workflow.utils-legacy (npm)
1 compromised version
- Feb 3, 2025
Malicious code in tree-sitter-sqlite (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in trace-production (npm)
1 compromised version
- Feb 3, 2025
Malicious code in toptal-react-bikes (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in sjzxy (npm)
1 compromised version
- Feb 3, 2025
Malicious code in safe-modules (npm)
1 compromised version
- Feb 3, 2025
Malicious code in reducal (npm)
1 compromised version
- Feb 3, 2025
Malicious code in precompiled-iris300 (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in pegin-cap-evaluator (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in nuxtjs_style_resources (npm)
1 compromised version
- Feb 3, 2025
Malicious code in new-items-card-component (npm)
1 compromised version
- Feb 3, 2025
Malicious code in moonpay-widget (npm)
1 compromised version
- Feb 3, 2025
Malicious code in meeting-card-component (npm)
1 compromised version
- Feb 3, 2025
Malicious code in markdownalint-cli2 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in invalid-dependency (npm)
1 compromised version
- Feb 3, 2025
Malicious code in insights-card-component (npm)
1 compromised version
- Feb 3, 2025
Malicious code in hosted-wallet-page (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in fitbit-widget-dropdown (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in example-advanced (npm)
1 compromised version
Page 6429 of 7,308