Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- May 11, 2026
Malicious code in @tanstack/eslint-plugin-router (npm)
2 compromised versions
- May 11, 2026
Malware in @tanstack/eslint-plugin-router
1 compromised version
- May 11, 2026
Malicious code in @tanstack/arktype-adapter (npm)
2 compromised versions
- May 11, 2026
Malware in @tanstack/arktype-adapter
1 compromised version
- May 11, 2026
Malicious code in @mistralai/mistralai (npm)
3 compromised versions
- May 11, 2026
Malware in @mistralai/mistralai
1 compromised version
- May 11, 2026
Malicious code in cplace-bmw-emt-mvp (npm)
1 compromised version
- May 11, 2026
Malicious code in crypto-javascri (npm)
15 compromised versions
- May 11, 2026
Malicious code in @mimecast-ui/components (npm)
1 compromised version
- May 11, 2026
Malicious code in @mimecast-ui/charts (npm)
1 compromised version
- May 11, 2026
Malicious code in @cplace-workflow-fe/cf-workflow (npm)
1 compromised version
- May 11, 2026
Malicious code in byvendors (npm)
2 compromised versions
- May 11, 2026
Malicious code in briantreehttp (npm)
- May 11, 2026
Malicious code in pp-react-v5 (npm)
3 compromised versions
- May 10, 2026
Malicious code in ac-sasskit (npm)
2 compromised versions
- May 10, 2026
Malicious code in rsflows-pexml (npm)
2 compromised versions
- May 10, 2026
Malicious code in noon-contracts (npm)
1 compromised version
- May 10, 2026
Malicious code in post-purchase-bundler (npm)
2 compromised versions
- May 10, 2026
Malicious code in @miurba/alcazaba (npm)
1 compromised version
- May 10, 2026
Malicious code in mw-filesystem-events-nodream (npm)
1 compromised version
- May 10, 2026
Malicious code in erslove (npm)
- May 10, 2026
Malicious code in dit-envv (npm)
- May 9, 2026
Malicious code in @rsi-community/hub-schema (npm)
1 compromised version
- May 9, 2026
Malicious code in @matjp/dvi-decode (npm)
1 compromised version
- May 9, 2026
Malicious code in apple-mycelium-fix (npm)
2 compromised versions
- May 9, 2026
Malicious code in haswons (npm)
- May 8, 2026
Malicious code in oneblk-design-system (npm)
1 compromised version
- May 8, 2026
Malicious code in devsite-youtube (npm)
1 compromised version
- May 8, 2026
Malicious code in typo-crypto (npm)
1 compromised version
- May 8, 2026
Malicious code in money-badger-open-rpc-test-bugbount (npm)
1 compromised version
- May 8, 2026
Malicious code in tecken (npm)
2 compromised versions
- May 8, 2026
Malicious code in coral-dev-proxy (npm)
2 compromised versions
- May 8, 2026
Malicious code in @gaia-codesearch/gaia-api-typescript (npm)
2 compromised versions
- May 8, 2026
Malicious code in @gaia-codesearch/gaia-api-python (npm)
2 compromised versions
- May 8, 2026
Malicious code in connect-perspectives-admintool (npm)
1 compromised version
- May 8, 2026
Malicious code in msal-browser-1p (npm)
1 compromised version
- May 8, 2026
Malicious code in playgod (npm)
1 compromised version
- May 7, 2026
Malicious code in owa-analytics-utils (npm)
1 compromised version
- May 7, 2026
Malicious code in @b2bneo-rest/api-csf (npm)
1 compromised version
- May 7, 2026
Malicious code in mrdaa-frontend (npm)
1 compromised version
- May 7, 2026
Malicious code in 24712-pl5006 (npm)
2 compromised versions
- May 7, 2026
Malicious code in camelotlabs-worker (npm)
- May 7, 2026
Malicious code in camelotlabs-utils (npm)
- May 7, 2026
Malicious code in camelotlabs-sdk (npm)
- May 7, 2026
Malicious code in camelotlabs-core (npm)
- May 7, 2026
Malicious code in camelotlabs-config (npm)
- May 6, 2026
Malicious code in 24712-pl5004 (npm)
1 compromised version
- May 6, 2026
Malicious code in @paysafe-tracking/error-monitoring (npm)
2 compromised versions
- May 6, 2026
Malicious code in 24712-pl4712 (npm)
1 compromised version
- May 6, 2026
Malicious code in b2bneo-rest (npm)
1 compromised version
Page 113 of 4,804