Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- May 14, 2026
Malicious code in web3-utils-core (npm)
- May 14, 2026
Malicious code in solidity-lib (npm)
- May 14, 2026
Malicious code in hardhat-core-utils (npm)
- May 14, 2026
Malicious code in evm-utils (npm)
- May 14, 2026
Malware in web3-utils-core
1 compromised version
- May 14, 2026
Malware in solidity-lib
1 compromised version
- May 14, 2026
Malware in evm-utils
1 compromised version
- May 14, 2026
Malware in hardhat-core-utils
1 compromised version
- May 14, 2026
Malicious code in viem-utils-core (npm)
- May 14, 2026
Malicious code in viem-core (npm)
- May 14, 2026
Malicious code in foundry-utils (npm)
- May 14, 2026
Malware in viem-core
1 compromised version
- May 14, 2026
Malware in viem-utils-core
1 compromised version
- May 14, 2026
Malware in foundry-utils
1 compromised version
- May 14, 2026
Malicious code in @convera/ui-shared (npm)
2 compromised versions
- May 13, 2026
Malicious code in npmjs_ethers-common (npm)
1 compromised version
- May 13, 2026
Malicious code in npmjs_solc-helper (npm)
1 compromised version
- May 13, 2026
Malicious code in npmjs_hardhat-common (npm)
1 compromised version
- May 13, 2026
Malicious code in ethers-wordlist (npm)
1 compromised version
- May 13, 2026
Malicious code in ethers-web (npm)
1 compromised version
- May 13, 2026
Malicious code in ethers-json-wallet (npm)
1 compromised version
- May 13, 2026
Malicious code in ethers-logger (npm)
1 compromised version
- May 13, 2026
Malicious code in chia-network (npm)
1 compromised version
- May 13, 2026
Malicious code in load-bufferjs (npm)
- May 13, 2026
Malicious code in buffer-export (npm)
- May 13, 2026
Malware in buffer-export
1 compromised version
- May 13, 2026
Malware in load-bufferjs
1 compromised version
- May 13, 2026
Malicious code in chai-as-streamed (npm)
1 compromised version
- May 13, 2026
Malware in chai-as-streamed
1 compromised version
- May 13, 2026
Malicious code in puppeteer-core (npm)
1 compromised version
- May 13, 2026
Withdrawn Advisory: Malware in puppeteer-core
1 compromised version
- May 13, 2026
Malicious code in @puppeteer/browsers (npm)
1 compromised version
- May 13, 2026
Withdrawn Advisory: Malware in @puppeteer/browsers
1 compromised version
- May 13, 2026
Malicious code in hello-world-pkg-value-value-p (npm)
2 compromised versions
- May 13, 2026
Malicious code in truffle-js (npm)
2 compromised versions
- May 13, 2026
Malicious code in hardhat-common (npm)
2 compromised versions
- May 13, 2026
Malicious code in hardhat-core (npm)
1 compromised version
- May 13, 2026
Malicious code in ethers-io (npm)
2 compromised versions
- May 13, 2026
Malicious code in solc-helper (npm)
2 compromised versions
- May 13, 2026
Malicious code in ethers-common (npm)
2 compromised versions
- May 13, 2026
Malicious code in truffle-helper (npm)
2 compromised versions
- May 13, 2026
Malicious code in web3-common (npm)
2 compromised versions
- May 13, 2026
Malicious code in web3-core-js (npm)
2 compromised versions
- May 13, 2026
Malicious code in vue-template-compiler-plugin (npm)
1 compromised version
- May 13, 2026
Malicious code in @dropout-ai/runtime (npm)
1 compromised version
- May 13, 2026
Malicious code in @design-system-coopeuch/web (npm)
2 compromised versions
- May 13, 2026
Malicious code in supabase-javascript (npm)
1 compromised version
- May 13, 2026
Malicious code in ms-graph-types (npm)
1 compromised version
- May 13, 2026
Malicious code in microsoft-applicationinsights-common (npm)
1 compromised version
- May 13, 2026
Malicious code in iceberg-javascript (npm)
1 compromised version
Page 105 of 4,804