Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Jan 31, 2025
Malicious code in delete-deployments (npm)
1 compromised version
- Jan 31, 2025
Malicious code in css-blocks-monorepo (npm)
1 compromised version
- Jan 31, 2025
Malicious code in compiler-version (npm)
1 compromised version
- Jan 31, 2025
Malicious code in com.unity.ai.navigation (npm)
6 compromised versions
- Jan 31, 2025
Malicious code in checkmkwebapiclient (npm)
2 compromised versions
- Jan 31, 2025
Malicious code in browser-nextjs (npm)
2 compromised versions
- Jan 31, 2025
Malicious code in momnet (npm)
- Jan 31, 2025
Malware in momnet
1 compromised version
- Jan 30, 2025
Malicious code in node-telegram-sdk (npm)
1 compromised version
- Jan 30, 2025
Malicious code in whaletail (npm)
1 compromised version
- Jan 30, 2025
Malicious code in web-actions-v4 (npm)
1 compromised version
- Jan 30, 2025
Malicious code in waseem987 (npm)
1 compromised version
- Jan 30, 2025
Malicious code in waseem (npm)
3 compromised versions
- Jan 30, 2025
Malicious code in vscode-bazel-bsp (npm)
2 compromised versions
- Jan 30, 2025
Malicious code in types-safety-web (npm)
5 compromised versions
- Jan 30, 2025
Malicious code in trigger-gitlab-pipeline (npm)
1 compromised version
- Jan 30, 2025
Malicious code in transaction-report (npm)
1 compromised version
- Jan 30, 2025
Malicious code in tokenization-lab (npm)
1 compromised version
- Jan 30, 2025
Malicious code in theme-tools (npm)
1 compromised version
- Jan 30, 2025
Malicious code in theme-check-vscode (npm)
1 compromised version
- Jan 30, 2025
Malicious code in teswewewewted (npm)
1 compromised version
- Jan 30, 2025
Malicious code in test_package_file (npm)
2 compromised versions
- Jan 30, 2025
Malicious code in talk-desktop (npm)
1 compromised version
- Jan 30, 2025
Malicious code in solhint-plugin-algebra (npm)
4 compromised versions
- Jan 30, 2025
Malicious code in sippo-vroidsdk-test2 (npm)
1 compromised version
- Jan 30, 2025
Malicious code in ruby-typeprof (npm)
1 compromised version
- Jan 30, 2025
Malicious code in rif-wallet (npm)
1 compromised version
- Jan 30, 2025
Malicious code in resources.data.gov (npm)
1 compromised version
- Jan 30, 2025
Malicious code in realtime-from-scratch (npm)
1 compromised version
- Jan 30, 2025
Malicious code in pegin-address-verificator (npm)
4 compromised versions
- Jan 30, 2025
Malicious code in package-maintenance (npm)
1 compromised version
- Jan 30, 2025
Malicious code in otelcollector (npm)
1 compromised version
- Jan 30, 2025
Malicious code in old-celo-base (npm)
1 compromised version
- Jan 30, 2025
Malicious code in npm_linux (npm)
1 compromised version
- Jan 30, 2025
Malicious code in node_package_runner (npm)
3 compromised versions
- Jan 30, 2025
Malicious code in move-binary-format-wasm (npm)
2 compromised versions
- Jan 30, 2025
Malicious code in money-market (npm)
1 compromised version
- Jan 30, 2025
Malicious code in media_kit_native_event_loop (npm)
1 compromised version
- Jan 30, 2025
Malicious code in lightbeam-we (npm)
1 compromised version
- Jan 30, 2025
Malicious code in launchpad-ui (npm)
1 compromised version
- Jan 30, 2025
Malicious code in kibana-release-notes (npm)
1 compromised version
- Jan 30, 2025
Malicious code in jaeger-ui (npm)
1 compromised version
- Jan 30, 2025
Malicious code in interview-code-challenge-full-stack (npm)
1 compromised version
- Jan 30, 2025
Malicious code in incomesample (npm)
1 compromised version
- Jan 30, 2025
Malicious code in grabathon-5.0 (npm)
1 compromised version
- Jan 30, 2025
Malicious code in google.kythe (npm)
1 compromised version
- Jan 30, 2025
Malicious code in gcp-scanner-visualizer (npm)
2 compromised versions
- Jan 30, 2025
Malicious code in gatsby-eui-starter (npm)
1 compromised version
- Jan 30, 2025
Malicious code in gateway-eth-ts (npm)
2 compromised versions
- Jan 30, 2025
Malicious code in fury-core-action (npm)
2 compromised versions
Page 6443 of 7,308