Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- May 18, 2026
Malware in citrea-utils
1 compromised version
- May 18, 2026
Malicious code in zentra-sdk (npm)
- May 18, 2026
Malicious code in zentra-finance (npm)
- May 18, 2026
Malware in zentra-sdk
1 compromised version
- May 18, 2026
Malware in zentra-finance
1 compromised version
- May 18, 2026
Malicious code in ctf-flare (npm)
1 compromised version
- May 18, 2026
Malicious code in safe-env-reader (npm)
- May 18, 2026
Malware in safe-env-reader
1 compromised version
- May 18, 2026
Malicious code in validate-api-key (npm)
- May 18, 2026
Malicious code in string-manipulation-typescript (npm)
- May 18, 2026
Malicious code in secure-env-loader (npm)
- May 18, 2026
Malicious code in parse-regex-string (npm)
- May 18, 2026
Malicious code in parse-escape-regex-string (npm)
- May 18, 2026
Malware in validate-api-key
1 compromised version
- May 18, 2026
Malware in secure-env-loader
1 compromised version
- May 18, 2026
Malware in parse-regex-string
1 compromised version
- May 18, 2026
Malware in string-manipulation-typescript
1 compromised version
- May 18, 2026
Malware in parse-escape-regex-string
1 compromised version
- May 17, 2026
Malicious code in @easytipsportal/node-helper (npm)
1 compromised version
- May 17, 2026
Malicious code in claude-code-base-action (npm)
2 compromised versions
- May 17, 2026
Malicious code in @pluxee-connect/account-db-api-client (npm)
2 compromised versions
- May 17, 2026
Malicious code in clementine-sdk (npm)
1 compromised version
- May 17, 2026
Malicious code in @zentrafinance/protocol-config (npm)
2 compromised versions
- May 17, 2026
Malicious code in citrea-sdk (npm)
1 compromised version
- May 17, 2026
Malicious code in citrea-bridge (npm)
1 compromised version
- May 16, 2026
Malicious code in @tc-core/campus-service (npm)
1 compromised version
- May 16, 2026
Malicious code in @citi-icg-158830/icgds-react-css (npm)
1 compromised version
- May 16, 2026
Malicious code in @citi-icg-158830/elemental-ui-react (npm)
2 compromised versions
- May 16, 2026
Malicious code in @citi-icg-158830/elemental-chameleon (npm)
2 compromised versions
- May 16, 2026
Malicious code in bui-react-10components (npm)
1 compromised version
- May 16, 2026
Malicious code in @zentrafinance/types (npm)
1 compromised version
- May 16, 2026
Malicious code in @zentrafinance/sdk (npm)
1 compromised version
- May 16, 2026
Malicious code in apexpro-node (npm)
1 compromised version
- May 16, 2026
Malicious code in apex-connector (npm)
1 compromised version
- May 16, 2026
Malicious code in apexomni-node (npm)
1 compromised version
- May 16, 2026
Malicious code in apex-trading (npm)
1 compromised version
- May 15, 2026
Malicious code in @datatrain/passenger-v3 (npm)
1 compromised version
- May 15, 2026
Malicious code in the_secret_of_running_by_hans_van_dijk_ron_van_megen_02jsk (npm)
- May 15, 2026
Malicious code in dowload_ebok_the_upside_of_unrequited_by_becky_albertalli_2jgmw (npm)
- MAL-2026-3799Malwarenpmdowload_ebok_the_testament_of_solomon_by_king_solomon_frederick_cornwallis_conybeare_5201cMay 15, 2026
Malicious code in dowload_ebok_the_testament_of_solomon_by_king_solomon_frederick_cornwallis_conybeare_5201c (npm)
- May 15, 2026
Malicious code in dowload_ebok_terra_incognita_urania_by_ian_mcdonald_um4vu (npm)
- MAL-2026-3797Malwarenpmdowload_ebok_stalking_jack_the_ripper_by_kerri_maniscalco_james_patterson_b529tMay 15, 2026
Malicious code in dowload_ebok_stalking_jack_the_ripper_by_kerri_maniscalco_james_patterson_b529t (npm)
- May 15, 2026
Malicious code in dowload_ebok_los_enemigos_del_comercio_by_antonio_escohotado_6t2l4 (npm)
- May 15, 2026
Malicious code in dowload_ebok_como_leer_el_futbol_by_ruud_gullit_8qd97 (npm)
- May 15, 2026
Malicious code in dowload_ebok_also_an_octopus_by_maggie_tokuda_hall_ah2ip (npm)
- May 15, 2026
Malware in dowload_ebok_los_enemigos_del_comercio_by_antonio_escohotado_6t2l4
1 compromised version
- May 15, 2026
Malware in dowload_ebok_the_upside_of_unrequited_by_becky_albertalli_2jgmw
1 compromised version
- GHSA-gx89-7jf6-wf89Malwarenpmdowload_ebok_stalking_jack_the_ripper_by_kerri_maniscalco_james_patterson_b529tMay 15, 2026
Malware in dowload_ebok_stalking_jack_the_ripper_by_kerri_maniscalco_james_patterson_b529t
1 compromised version
- May 15, 2026
Malware in the_secret_of_running_by_hans_van_dijk_ron_van_megen_02jsk
1 compromised version
- GHSA-cgc9-hq34-3978Malwarenpmdowload_ebok_the_testament_of_solomon_by_king_solomon_frederick_cornwallis_conybeare_5201cMay 15, 2026
Malware in dowload_ebok_the_testament_of_solomon_by_king_solomon_frederick_cornwallis_conybeare_5201c
1 compromised version
Page 102 of 4,804