Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- Apr 16, 2026
Malicious code in metrify-chain (npm)
1 compromised version
- Apr 16, 2026
Malicious code in marketing-analytics (npm)
1 compromised version
- Apr 16, 2026
Malicious code in linode-developers (npm)
1 compromised version
- Apr 16, 2026
Malicious code in int-browsing-gateway (npm)
1 compromised version
- Apr 16, 2026
Malicious code in insomnia-smoke-test (npm)
1 compromised version
- Apr 16, 2026
Malicious code in insomnia-scripting-environment (npm)
2 compromised versions
- Apr 16, 2026
Malicious code in insomnia-api (npm)
2 compromised versions
- Apr 16, 2026
Malicious code in idaasfinancialnodeserv (npm)
1 compromised version
- Apr 16, 2026
Malicious code in icims-express-dot-engine (npm)
1 compromised version
- Apr 16, 2026
Malicious code in helios-components (npm)
1 compromised version
- Apr 16, 2026
Malicious code in hardhat-starter-kit (npm)
1 compromised version
- Apr 16, 2026
Malicious code in h3-next (npm)
1 compromised version
- Apr 16, 2026
Malicious code in ground-platform (npm)
1 compromised version
- Apr 16, 2026
Malicious code in gke-net (npm)
1 compromised version
- Apr 16, 2026
Malicious code in ghscan-pkgcheck-test-001 (npm)
1 compromised version
- Apr 16, 2026
Malicious code in gemini-cli-vscode-ide-companion (npm)
1 compromised version
- Apr 16, 2026
Malicious code in gemini-ai-checker (npm)
1 compromised version
- Apr 16, 2026
Malicious code in farikku-util (npm)
6 compromised versions
- Apr 16, 2026
Malicious code in f0-fpti-tracking (npm)
2 compromised versions
- Apr 16, 2026
Malicious code in f0-email-verification (npm)
2 compromised versions
- Apr 16, 2026
Malicious code in express-auth-basic (npm)
1 compromised version
- Apr 16, 2026
Malicious code in estaspnet (npm)
1 compromised version
- Apr 16, 2026
Malicious code in docai-sheets (npm)
1 compromised version
- Apr 16, 2026
Malicious code in digitallogger (npm)
1 compromised version
- Apr 16, 2026
Malicious code in devops-debug-tool-ctf (npm)
2 compromised versions
- Apr 16, 2026
Malicious code in deployer-kit (npm)
1 compromised version
- Apr 16, 2026
Malicious code in declarative-tracker (npm)
1 compromised version
- Apr 16, 2026
Malicious code in country-specialization (npm)
1 compromised version
- Apr 16, 2026
Malicious code in coremeshnode (npm)
1 compromised version
- Apr 16, 2026
Malicious code in coremesh (npm)
1 compromised version
- Apr 16, 2026
Malicious code in conversation-relay (npm)
1 compromised version
- Apr 16, 2026
Malicious code in collect-rangers (npm)
1 compromised version
- Apr 16, 2026
Malicious code in cloud-run-microservice-template (npm)
1 compromised version
- Apr 16, 2026
Malicious code in chainlink-docs (npm)
1 compromised version
- Apr 16, 2026
Malicious code in chain-syncora (npm)
1 compromised version
- Apr 16, 2026
Malicious code in chain-metrica (npm)
1 compromised version
- Apr 16, 2026
Malicious code in chai-use-chain (npm)
2 compromised versions
- Apr 16, 2026
Malicious code in chai-extensions-extra (npm)
1 compromised version
- Apr 16, 2026
Malicious code in chai-chain-coremesh (npm)
1 compromised version
- Apr 16, 2026
Malicious code in ccip-starter-kit-hardhat (npm)
1 compromised version
- Apr 16, 2026
Malicious code in cardreadermgmtserv (npm)
1 compromised version
- Apr 16, 2026
Malicious code in business-data (npm)
2 compromised versions
- Apr 16, 2026
Malicious code in buildkite-test-collector-vitest-example (npm)
1 compromised version
- Apr 16, 2026
Malicious code in buildkite-test-collector-playwright-example (npm)
1 compromised version
- Apr 16, 2026
Malicious code in buildkite-test-collector-mocha-example (npm)
1 compromised version
- Apr 16, 2026
Malicious code in buildkite-test-collector-jest-example (npm)
2 compromised versions
- Apr 16, 2026
Malicious code in buildkite-test-collector-jasmine-example (npm)
1 compromised version
- Apr 16, 2026
Malicious code in buildkite-test-collector-cypress-example (npm)
1 compromised version
- Apr 16, 2026
Malicious code in browserstack-utils (npm)
1 compromised version
- Apr 16, 2026
Malicious code in apl-github-test (npm)
1 compromised version
Page 125 of 4,804