Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- May 19, 2026
Malicious code in @antv/f-lottie (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/f-engine (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/f-charts (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/expr (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/event-emitter (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/dw-util (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/dw-transform (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/dw-random (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/dw-analyzer (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/dumi-theme-antv (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/dom-util (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/dipper-map (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/dipper-hooks (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/dipper-component (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/data-wizard (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/data-set (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/data-samples (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/d3-interpolate (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/d3-color (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/coord (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/component (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/color-util (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/color-schema (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/ckb (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/chart-visualization-skills (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/chart-node-g6 (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/chart-linter (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/calendar-heatmap (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/awards (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/ava-react (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/ava (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/attr (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/async-hook (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/algorithm (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/adjust (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/a8 (npm)
2 compromised versions
- May 19, 2026
Malicious code in byte-parser (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/x6-geometry (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/x6 (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-assets-advance (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/g-image-exporter (npm)
2 compromised versions
- May 18, 2026
Malicious code in citrea-utils (npm)
- May 18, 2026
Malicious code in @zentrafinance/contracts (npm)
- May 18, 2026
Malware in @zentrafinance/contracts
1 compromised version
- May 18, 2026
Malware in @zentrafinance/sdk
1 compromised version
- May 18, 2026
Malware in @zentrafinance/protocol-config
1 compromised version
- May 18, 2026
Malware in citrea-bridge
1 compromised version
- May 18, 2026
Malware in citrea-sdk
1 compromised version
- May 18, 2026
Malware in clementine-sdk
1 compromised version
- May 18, 2026
Malware in @zentrafinance/types
1 compromised version
Page 101 of 4,804