Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Jan 30, 2025
Malicious code in flight_lab_control (npm)
1 compromised version
- Jan 30, 2025
Malicious code in flashcards-sdk-converter (npm)
1 compromised version
- Jan 30, 2025
Malicious code in firefoxcolor (npm)
1 compromised version
- Jan 30, 2025
Malicious code in fabric-shim-docs (npm)
1 compromised version
- Jan 30, 2025
Malicious code in example-yarn (npm)
1 compromised version
- Jan 30, 2025
Malicious code in example-app-node (npm)
1 compromised version
- Jan 30, 2025
Malicious code in eslint-v9 (npm)
1 compromised version
- Jan 30, 2025
Malicious code in emergency-pull-request-probot-app (npm)
1 compromised version
- Jan 30, 2025
Malicious code in ember-super-prosemirror (npm)
1 compromised version
- Jan 30, 2025
Malicious code in educationpurpose (npm)
1 compromised version
- Jan 30, 2025
Malicious code in css-blocks-ember (npm)
1 compromised version
- Jan 30, 2025
Malicious code in controlplane (npm)
1 compromised version
- Jan 30, 2025
Malicious code in cond-common-components (npm)
1 compromised version
- Jan 30, 2025
Malicious code in common-test-utils (npm)
2 compromised versions
- Jan 30, 2025
Malicious code in coinbase-wallet-history-frontend (npm)
1 compromised version
- Jan 30, 2025
Malicious code in cognito_authorizer (npm)
1 compromised version
- Jan 30, 2025
Malicious code in codeql-query (npm)
1 compromised version
- Jan 30, 2025
Malicious code in cli-docs-site (npm)
1 compromised version
- Jan 30, 2025
Malicious code in check-release-dependencies (npm)
2 compromised versions
- Jan 30, 2025
Malicious code in cc-component-lib (npm)
1 compromised version
- Jan 30, 2025
Malicious code in calling-integration-sdk-demo-react-ts (npm)
2 compromised versions
- Jan 30, 2025
Malicious code in bootcamp-hackathon (npm)
1 compromised version
- Jan 30, 2025
Malicious code in backpack-foundations (npm)
1 compromised version
- Jan 30, 2025
Malicious code in auto-claim-service (npm)
2 compromised versions
- Jan 30, 2025
Malicious code in auth0-langchain-rag-js (npm)
1 compromised version
- Jan 30, 2025
Malicious code in alchemy-asset-transfers-benchmark (npm)
1 compromised version
- Jan 30, 2025
Malicious code in admission-server (npm)
1 compromised version
- Jan 30, 2025
Malicious code in addon-sdk (npm)
3 compromised versions
- Jan 30, 2025
Malicious code in @zohaib2121/dtapp (npm)
1 compromised version
- Jan 30, 2025
Malicious code in tree-sitter-hcl (npm)
1 compromised version
- Jan 30, 2025
Malicious code in hardhat-configs (npm)
1 compromised version
- Jan 30, 2025
Malicious code in @nomicsfondation/hardhat-configs (npm)
3 compromised versions
- Jan 30, 2025
Malicious code in telegramclient-utils (npm)
2 compromised versions
- Jan 30, 2025
Malicious code in telegram-util (npm)
1 compromised version
- Jan 30, 2025
Malicious code in node-telegram-bot-sdk (npm)
1 compromised version
- Jan 30, 2025
Malicious code in grammyjs-utils (npm)
1 compromised version
- Jan 30, 2025
Malicious code in grammy-utils (npm)
4 compromised versions
- Jan 29, 2025
Malicious code in openbet-access-controller (npm)
1 compromised version
- Jan 29, 2025
Malicious code in requests-async (npm)
10 compromised versions
- Jan 29, 2025
Malicious code in @komoot/kvstore (npm)
1 compromised version
- Jan 29, 2025
Malicious code in org.cocoapods.csv (npm)
3 compromised versions
- Jan 29, 2025
Malicious code in sample_cluster (npm)
1 compromised version
- Jan 29, 2025
Malicious code in digitalexp-datasource-definitions (npm)
3 compromised versions
- Jan 28, 2025
Malicious code in digitalexp-components (npm)
13 compromised versions
- Jan 28, 2025
Malicious code in home-assignment (npm)
1 compromised version
- Jan 28, 2025
Malicious code in intel-enterprise-rag-ui (npm)
1 compromised version
- Jan 28, 2025
Malicious code in gatsby-theme-tinker-tailor (npm)
1 compromised version
- Jan 28, 2025
Malicious code in testbcms (npm)
1 compromised version
- Jan 28, 2025
Malicious code in kuvvet_poc (npm)
2 compromised versions
- Jan 28, 2025
Malicious code in theice (npm)
7 compromised versions
Page 6444 of 7,308