Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
298,306 total in npm · sorted newest first- Sep 12, 2026
Malicious code in tailwind-form-kit (npm)
1 compromised version
- Sep 12, 2026
Malicious code in cr-bot-common (npm)
1 compromised version
- Sep 12, 2026
Malicious code in greensaver (npm)
1 compromised version
- Sep 12, 2026
Malicious code in tracker-cloudflare (npm)
1 compromised version
- Sep 11, 2026
Malicious code in greensaver (npm)
3 compromised versions
- Sep 11, 2026
Malicious code in cr-bot-common (npm)
1 compromised version
- Sep 11, 2026
Malicious code in tailwind-form-kit (npm)
1 compromised version
- Sep 11, 2026
Malicious code in tracker-cloudflare (npm)
1 compromised version
- Sep 11, 2026
Malicious code in @nimbusedge/auth (npm)
1 compromised version
- Sep 11, 2026
Malicious code in @nimbusedge/auth (npm)
40 compromised versions
- Sep 11, 2026
Malware in tailwind-form-kit
1 compromised version
- Sep 11, 2026
Malicious code in strapi-plugin-vinsoc-1109 (npm)
1 compromised version
- Sep 11, 2026
Malicious code in strapi-plugin-vinsoc-1109 (npm)
1 compromised version
- Sep 11, 2026
Malware in daytona-test-npm
1 compromised version
- Sep 11, 2026
Malware in daytona-test-filereader
1 compromised version
- Sep 11, 2026
Malware in daytona-test-miner
1 compromised version
- Sep 10, 2026
Malware in cat-sis2go-utils
1 compromised version
- Sep 10, 2026
Malware in @yongot/canary-mcp-test
1 compromised version
- Sep 10, 2026
Malware in @yongot/canary-mcp-isolation
1 compromised version
- Sep 10, 2026
Malware in @yongot/canary-mcp-test-2
1 compromised version
- Sep 10, 2026
Malicious code in tailwindcss-contact-forms (npm)
1 compromised version
- Sep 10, 2026
Malicious code in pinochiomathm (npm)
1 compromised version
- Sep 10, 2026
Malicious code in pinochiomathm (npm)
4 compromised versions
- Sep 10, 2026
Malicious code in tailwindcss-contact-forms (npm)
8 compromised versions
- Sep 10, 2026
Malware in tailwindcss-contact-forms
1 compromised version
- Sep 10, 2026
Malicious code in far-cyan-mite (npm)
1 compromised version
- Sep 10, 2026
Malicious code in far-pink-anglerfish (npm)
1 compromised version
- Sep 10, 2026
Malicious code in far_bovid_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in far-teal-platypus (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fantastic_peafowl_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fantastic_wolf_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fantastic_meadowlark_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in far-jade-porcupine (npm)
1 compromised version
- Sep 10, 2026
Malicious code in far-aquamarine-parakeet (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fantastic_parrotfish_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in far-gray-pike (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fantastic-crimson-dolphin (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fantastic_locust_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fantastic_lizard_0xrequest (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fancy_perch_0xrequest (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fantastic_mollusk_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fantastic_rat_0xrequest (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fancy_roadrunner_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fantastic_lemur_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fantastic_hedgehog_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fancy_snail_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fantastic_goose_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fantastic-copper-heron (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fancy_dormouse_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fandyx (npm)
1 compromised version
Page 1 of 5,967