Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Feb 3, 2025
Malicious code in link_paidy (npm)
- Feb 3, 2025
Malicious code in lge-example (npm)
- Feb 3, 2025
Malicious code in lazy-loading-router-provider (npm)
- Feb 3, 2025
Malicious code in l10nmessages-website (npm)
- Feb 3, 2025
Malicious code in ib-ai-react (npm)
- Feb 3, 2025
Malicious code in firehose-poc-client (npm)
- Feb 3, 2025
Malicious code in fastlane_paypal_video_project (npm)
- Feb 3, 2025
Malicious code in facebook-pixel-wordpress-js-lib (npm)
- Feb 3, 2025
Malicious code in etched-oracle (npm)
- Feb 3, 2025
Malicious code in deep-links-movie-tutorial (npm)
- Feb 3, 2025
Malicious code in custom-query-parse-serialization (npm)
- Feb 3, 2025
Malicious code in custom-filter-link (npm)
- Feb 3, 2025
Malicious code in cpp-jwt (npm)
- Feb 3, 2025
Malware in custom-query-parse-serialization
1 compromised version
- Feb 3, 2025
Malware in fastlane_paypal_video_project
1 compromised version
- Feb 3, 2025
Malware in deep-links-movie-tutorial
1 compromised version
- Feb 3, 2025
Malware in etched-oracle
1 compromised version
- Feb 3, 2025
Malware in zapier-shops-orders
1 compromised version
- Feb 3, 2025
Malware in lge-example
1 compromised version
- Feb 3, 2025
Malware in ton-payment-channels-example
1 compromised version
- Feb 3, 2025
Malware in ib-ai-react
1 compromised version
- Feb 3, 2025
Malware in paypal-js-advanced-integration-ib
1 compromised version
- Feb 3, 2025
Malware in link_paidy
1 compromised version
- Feb 3, 2025
Malware in firehose-poc-client
1 compromised version
- Feb 3, 2025
Malware in sol-wallet-adapter-example
1 compromised version
- Feb 3, 2025
Malware in webhook-example-coinbase-commerce-node
1 compromised version
- Feb 3, 2025
Malware in cpp-jwt
1 compromised version
- Feb 3, 2025
Malware in ppcp-starter-node
1 compromised version
- Feb 3, 2025
Malware in ton-examples
1 compromised version
- Feb 3, 2025
Malware in l10nmessages-website
1 compromised version
- Feb 3, 2025
Malware in custom-filter-link
1 compromised version
- Feb 3, 2025
Malware in facebook-pixel-wordpress-js-lib
1 compromised version
- Feb 3, 2025
Malware in paypal-react-donation
1 compromised version
- Feb 3, 2025
Malware in pyre2
1 compromised version
- Feb 3, 2025
Malware in web3-onboard-sandbox
1 compromised version
- Feb 3, 2025
Malware in moonpay-websdk-buy
1 compromised version
- Feb 3, 2025
Malware in solana-graphql-playground
1 compromised version
- Feb 3, 2025
Malware in type-on-strap
1 compromised version
- Feb 3, 2025
Malware in navigation-blocking
1 compromised version
- Feb 3, 2025
Malware in lazy-loading-router-provider
1 compromised version
- Feb 3, 2025
Malware in bootstrap-sass-official
1 compromised version
- Feb 3, 2025
Malicious code in worker-template-postgres (npm)
- Feb 3, 2025
Malicious code in voc-dashboard (npm)
- Feb 3, 2025
Malicious code in twitter-cldr-npm (npm)
- Feb 3, 2025
Malicious code in nft-transfer-transformer (npm)
- Feb 3, 2025
Malicious code in nft-transfer-transforme (npm)
- Feb 3, 2025
Malicious code in lighthousebenchmarks (npm)
- Feb 3, 2025
Malicious code in github-elements (npm)
- Feb 3, 2025
Malicious code in git-scm.com (npm)
- Feb 3, 2025
Malicious code in dbc-wiki (npm)
Page 6435 of 7,308