Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- Apr 29, 2026
Malicious code in ac-sasskit-beta (npm)
1 compromised version
- Apr 29, 2026
Malicious code in apple-appstore-full-library-utility (npm)
1 compromised version
- Apr 29, 2026
Malicious code in apple-security-internal-scanner-v3 (npm)
1 compromised version
- Apr 29, 2026
Malicious code in internal-sys-audit-check (npm)
1 compromised version
- Apr 29, 2026
Malicious code in gcp-internal-research-poc (npm)
- Apr 29, 2026
Malicious code in frank-newton3-user-hunt (npm)
1 compromised version
- Apr 29, 2026
Malicious code in frank-newton3-final-audit (npm)
- Apr 29, 2026
Malicious code in frank-newton3-db-poc (npm)
- Apr 29, 2026
Malicious code in frank-newton3-db-final (npm)
- Apr 29, 2026
Malicious code in apple-internal-config (npm)
16 compromised versions
- Apr 29, 2026
Malicious code in apple-infra-stealth-audit (npm)
1 compromised version
- Apr 29, 2026
Malicious code in apple-infra-escape-audit (npm)
- Apr 29, 2026
Malware in frank-newton3-db-poc
1 compromised version
- Apr 29, 2026
Malware in apple-infra-escape-audit
1 compromised version
- Apr 29, 2026
Malware in frank-newton3-db-final
1 compromised version
- Apr 29, 2026
Malware in gcp-internal-research-poc
1 compromised version
- Apr 29, 2026
Malware in frank-newton3-user-hunt
1 compromised version
- Apr 29, 2026
Malware in frank-newton3-final-audit
1 compromised version
- Apr 29, 2026
Malware in apple-internal-config
1 compromised version
- Apr 29, 2026
Malware in internal-sys-audit-check
1 compromised version
- Apr 29, 2026
Malware in apple-infra-stealth-audit
1 compromised version
- Apr 29, 2026
Malware in apple-app-store-server-library-poc
1 compromised version
- Apr 29, 2026
Malicious code in react-native-parallax-scroll-view-updated (npm)
1 compromised version
- Apr 29, 2026
Malicious code in internal-auth-provider (npm)
1 compromised version
- Apr 29, 2026
Malicious code in google-storage-cloud (npm)
1 compromised version
- Apr 29, 2026
Malicious code in enterprise-auth-gateway-core (npm)
1 compromised version
- Apr 29, 2026
Malicious code in @tech-global/internal-gateway-core (npm)
1 compromised version
- Apr 29, 2026
Malicious code in @omni-corp-infra/sso-bridge-core (npm)
1 compromised version
- Apr 29, 2026
Malicious code in @internal-infra/core-sso-bridge (npm)
1 compromised version
- Apr 29, 2026
Malicious code in @enterprise-core/auth-gateway-bridge (npm)
1 compromised version
- Apr 29, 2026
Malicious code in @corp-infra/sso-gateway-core (npm)
1 compromised version
- Apr 29, 2026
Malicious code in secrets-manager-wrapper (npm)
1 compromised version
- Apr 29, 2026
Malicious code in react-video-canvas (npm)
1 compromised version
- Apr 29, 2026
Malicious code in @saif777/codemirror5 (npm)
1 compromised version
- Apr 29, 2026
Malware in chai-as-mobj
1 compromised version
- Apr 29, 2026
Malicious code in chai-as-char (npm)
1 compromised version
- Apr 29, 2026
Malware in chai-as-char
1 compromised version
- Apr 29, 2026
Malware in chai-str
1 compromised version
- Apr 29, 2026
Malicious code in chai-as-redeployed (npm)
2 compromised versions
- Apr 29, 2026
Malware in chai-as-redeployed
1 compromised version
- Apr 29, 2026
Malware in chai-as-inserted
1 compromised version
- Apr 29, 2026
Malware in chai-as-ide
1 compromised version
- Apr 29, 2026
Malware in chai-as-stream
1 compromised version
- Apr 29, 2026
Malicious code in redeem-onchain-sdk (npm)
1 compromised version
- Apr 29, 2026
Malicious code in period-newline (npm)
1 compromised version
- Apr 29, 2026
Malicious code in nicegui (npm)
1 compromised version
- Apr 29, 2026
Malicious code in mbt (npm)
1 compromised version
- Apr 29, 2026
Malicious code in @cap-js/sqlite (npm)
1 compromised version
- Apr 29, 2026
Malicious code in @cap-js/postgres (npm)
1 compromised version
- Apr 29, 2026
Malicious code in @cap-js/db-service (npm)
1 compromised version
Page 118 of 4,804