Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- May 3, 2026
Malicious code in ally-allowlist (npm)
2 compromised versions
- May 3, 2026
Malicious code in @athena-portal/themes (npm)
2 compromised versions
- May 3, 2026
Malicious code in ally-eagw-identity (npm)
2 compromised versions
- May 3, 2026
Malicious code in ally-antivirus (npm)
2 compromised versions
- May 3, 2026
Malicious code in @breeze-ai/ui-library (npm)
2 compromised versions
- May 3, 2026
Malicious code in @breezeai-frontend/i18n-config (npm)
2 compromised versions
- May 3, 2026
Malicious code in apcyber-test-package (npm)
3 compromised versions
- May 3, 2026
Malicious code in ally-whitelist (npm)
2 compromised versions
- May 3, 2026
Malicious code in @allyfinancial/allyfinancial-api (npm)
2 compromised versions
- May 3, 2026
Malicious code in ally-json-threat-protect (npm)
2 compromised versions
- May 3, 2026
Malicious code in ally-starter-api (npm)
2 compromised versions
- May 3, 2026
Malicious code in ally-forms (npm)
2 compromised versions
- May 3, 2026
Malicious code in ally-ccapi (npm)
2 compromised versions
- May 3, 2026
Malicious code in ally-badges (npm)
2 compromised versions
- May 3, 2026
Malicious code in nextjs-chat-with-ai-service (npm)
1 compromised version
- May 2, 2026
Malicious code in apexpro (npm)
2 compromised versions
- May 2, 2026
Malicious code in apexomni (npm)
1 compromised version
- May 2, 2026
Malicious code in common-tg-service (npm)
19 compromised versions
- May 2, 2026
Malicious code in ams-ssk (npm)
- May 2, 2026
Malicious code in codewhisperer-streaming (npm)
1 compromised version
- May 1, 2026
Malicious code in bpmn-studio (npm)
1 compromised version
- May 1, 2026
Malicious code in archetype-style (npm)
1 compromised version
- May 1, 2026
Malicious code in update-db (npm)
2 compromised versions
- May 1, 2026
Malicious code in update-browserslist (npm)
1 compromised version
- May 1, 2026
Malicious code in browserslist-db (npm)
1 compromised version
- May 1, 2026
Malicious code in common-roles (npm)
1 compromised version
- May 1, 2026
Malware in @apple-pay-trust/cancelled
1 compromised version
- May 1, 2026
Malicious code in apple-internal-security-library-v99 (npm)
4 compromised versions
- May 1, 2026
Malware in apple-internal-security-library-v99
1 compromised version
- May 1, 2026
Malware in sirens-lament
1 compromised version
- May 1, 2026
Malware in gunpowder-ghost
1 compromised version
- May 1, 2026
Malware in blackbeards-navigator
1 compromised version
- May 1, 2026
Malicious code in path-internal-util (npm)
3 compromised versions
- May 1, 2026
Malicious code in path-addon (npm)
6 compromised versions
- May 1, 2026
Malicious code in gweb-build-system (npm)
1 compromised version
- Apr 30, 2026
Malicious code in service-gateway (npm)
1 compromised version
- Apr 30, 2026
Malicious code in intercom-client (npm)
1 compromised version
- Apr 30, 2026
Malware in intercom-client
1 compromised version
- Apr 30, 2026
Malicious code in eslint-plugin-skyscanner-dates (npm)
5 compromised versions
- Apr 30, 2026
Malware in @cap-js/db-service
1 compromised version
- Apr 30, 2026
Malware in @cap-js/postgres
1 compromised version
- Apr 30, 2026
Malware in @cap-js/sqlite
1 compromised version
- Apr 30, 2026
Malicious code in sirens-lament (npm)
10 compromised versions
- Apr 30, 2026
Malicious code in blackbeards-navigator (npm)
10 compromised versions
- Apr 30, 2026
Malicious code in apple-internal-security-audit-v99 (npm)
2 compromised versions
- Apr 30, 2026
Malicious code in react-dnd-14 (npm)
1 compromised version
- Apr 29, 2026
Malicious code in tanstack (npm)
4 compromised versions
- Apr 29, 2026
Malware in tanstack
1 compromised version
- Apr 29, 2026
Malicious code in @breezeai-frontend/cargo-ui (npm)
3 compromised versions
- Apr 29, 2026
Malicious code in @breezeai-frontend/tailwind-config (npm)
3 compromised versions
Page 117 of 4,804