Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Feb 3, 2025
Malicious code in effect-layout-function (npm)
1 compromised version
- Feb 3, 2025
Malicious code in drift-v1-cli (npm)
1 compromised version
- Feb 3, 2025
Malicious code in digitalexp-microfrontends-framework (npm)
1 compromised version
- Feb 3, 2025
Malicious code in cxf-plugins (npm)
1 compromised version
- Feb 3, 2025
Malicious code in cth-poc (npm)
12 compromised versions
- Feb 3, 2025
Malicious code in continue-docs (npm)
1 compromised version
- Feb 3, 2025
Malicious code in chakll (npm)
1 compromised version
- Feb 3, 2025
Malicious code in calendar-card-component (npm)
1 compromised version
- Feb 3, 2025
Malicious code in bastion-internship-dependency-confusion-poc (npm)
1 compromised version
- Feb 3, 2025
Malicious code in babel-plugin-remove-jsx-empty-expression (npm)
1 compromised version
- Feb 3, 2025
Malicious code in appqos-client (npm)
1 compromised version
- Feb 3, 2025
Malicious code in ad-language-monitor (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in @patheon-systems/workspace-configs (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in @justworkshr/alma (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in @devstack-angular/jdai (npm)
1 compromised version
- Feb 3, 2025
Malicious code in user-switching (npm)
1 compromised version
- Feb 3, 2025
Malicious code in typespublishercontenthash (npm)
1 compromised version
- Feb 3, 2025
Malicious code in twilio.github.io (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in spicy-sections (npm)
1 compromised version
- Feb 3, 2025
Malicious code in shader-examples (npm)
1 compromised version
- Feb 3, 2025
Malicious code in sahasuhdjdhajdhja (npm)
1 compromised version
- Feb 3, 2025
Malicious code in roro3 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in roro2 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in roro1 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in pages-proxy (npm)
1 compromised version
- Feb 3, 2025
Malicious code in minikit-monorepo (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in llvm-vs-code-extensions.vscode-clangd (npm)
1 compromised version
- Feb 3, 2025
Malicious code in lib-automotive-call-cdm (npm)
1 compromised version
- Feb 3, 2025
Malicious code in k6-docs (npm)
1 compromised version
- Feb 3, 2025
Malicious code in ibm.github.io (npm)
1 compromised version
- Feb 3, 2025
Malicious code in html-webpack-plugin-v5 (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in html-webpack-plugin-v4 (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in guests (npm)
1 compromised version
- Feb 3, 2025
Malicious code in files_texteditor (npm)
1 compromised version
- Feb 3, 2025
Malicious code in external-adapters-js (npm)
1 compromised version
- Feb 3, 2025
Malicious code in com.siccity.gltfutility (npm)
1 compromised version
- Feb 3, 2025
Malicious code in codat (npm)
1 compromised version
- Feb 3, 2025
Malicious code in cms-vue-boilerplate (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in cg-be-package (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in bookingcom-event (npm)
1 compromised version
- Feb 3, 2025
Malicious code in bookingcom-db (npm)
1 compromised version
- Feb 3, 2025
Malicious code in bookingcom-database (npm)
1 compromised version
- Feb 3, 2025
Malicious code in bookingcom-connect (npm)
1 compromised version
- Feb 3, 2025
Malicious code in bookingcom-admin (npm)
1 compromised version
- Feb 3, 2025
Malicious code in blynk-ide (npm)
1 compromised version
- Feb 3, 2025
Malicious code in bloomr-ts (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in bazelbuild.vscode-bazel (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in awsume (npm)
1 compromised version
- Feb 3, 2025
Malicious code in aws-genai-llm-chatbot (npm)
1 compromised version
- Feb 3, 2025
Malicious code in ar2-common (npm)
1 compromised version
Page 6430 of 7,308