Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- Apr 23, 2026
Malware in chai-as-optimized
1 compromised version
- Apr 23, 2026
Malicious code in eth-logger (npm)
2 compromised versions
- Apr 23, 2026
Malicious code in json-spacer (npm)
3 compromised versions
- Apr 23, 2026
Malicious code in json-dec (npm)
1 compromised version
- Apr 23, 2026
Malware in json-spacer
1 compromised version
- Apr 23, 2026
Malware in json-dec
1 compromised version
- Apr 23, 2026
Malicious code in changelog-utils-structured-logger (npm)
2 compromised versions
- Apr 23, 2026
Malicious code in changelog-cli-logger (npm)
10 compromised versions
- Apr 23, 2026
Malicious code in @nklkas/hyperliquid (npm)
1 compromised version
- Apr 23, 2026
Malware in @nklkas/hyperliquid
1 compromised version
- Apr 23, 2026
Malware in changelog-utils-structured-logger
1 compromised version
- Apr 23, 2026
Malware in changelog-cli-logger
1 compromised version
- Apr 23, 2026
Malicious code in undicy-http (npm)
- Apr 23, 2026
Malicious code in separadordeinfocc (npm)
- Apr 23, 2026
Malware in separadordeinfocc
1 compromised version
- Apr 23, 2026
Malware in undicy-http
1 compromised version
- Apr 23, 2026
Malicious code in vime-azl (npm)
- Apr 23, 2026
Malicious code in ts-bing (npm)
- Apr 23, 2026
Malware in ts-bing
1 compromised version
- Apr 23, 2026
Malware in vime-azl
1 compromised version
- Apr 23, 2026
Malicious code in rollup-plugin-polyfill-route (npm)
- Apr 23, 2026
Malware in rollup-plugin-polyfill-route
1 compromised version
- Apr 23, 2026
Malicious code in @amsterdam-local/forms-component-library (npm)
6 compromised versions
- Apr 23, 2026
Malware in @amsterdam-local/forms-component-library
1 compromised version
- Apr 23, 2026
Malware in spr-i18n-labels
1 compromised version
- Apr 23, 2026
Malware in shenxun162938
1 compromised version
- Apr 23, 2026
Malicious code in ts-moduler (npm)
- Apr 23, 2026
Malware in ts-moduler
1 compromised version
- Apr 22, 2026
Malicious code in @spinstorm/shared (npm)
1 compromised version
- Apr 22, 2026
Malicious code in @stlm/common-ui (npm)
- Apr 22, 2026
Malware in @stlm/common-ui
1 compromised version
- Apr 22, 2026
Malicious code in sparkling-sdk (npm)
- Apr 22, 2026
Malicious code in color-studio (npm)
- Apr 22, 2026
Malware in color-studio
1 compromised version
- Apr 22, 2026
Malware in sparkling-sdk
1 compromised version
- Apr 22, 2026
Malicious code in @openwebconcept/design-tokens (npm)
3 compromised versions
- Apr 22, 2026
Malware in @openwebconcept/design-tokens
1 compromised version
- Apr 22, 2026
Malicious code in @openwebconcept/theme-owc (npm)
3 compromised versions
- Apr 22, 2026
Malware in @openwebconcept/theme-owc
1 compromised version
- Apr 22, 2026
Malicious code in @automagik/genie (npm)
11 compromised versions
- Apr 22, 2026
Malware in @automagik/genie
1 compromised version
- Apr 22, 2026
Malicious code in pgserve (npm)
4 compromised versions
- Apr 22, 2026
Malware in pgserve
1 compromised version
- Apr 22, 2026
Malicious code in @bmg-web/bmg-dialog (npm)
1 compromised version
- Apr 22, 2026
Malicious code in @bmg-web/bmg-checkbox (npm)
1 compromised version
- Apr 22, 2026
Malicious code in etsyapp (npm)
1 compromised version
- Apr 22, 2026
Malicious code in @bmg-web/bmg-collapse (npm)
1 compromised version
- Apr 22, 2026
Malicious code in @bmg-web/bmg-grid (npm)
1 compromised version
- Apr 22, 2026
Malicious code in @bmg-web/bmg-button (npm)
1 compromised version
- Apr 22, 2026
Malicious code in @bmg-web/bmg-dropdown (npm)
1 compromised version
Page 121 of 4,804