Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- Apr 15, 2026
Malicious code in chai-as-adapter (npm)
1 compromised version
- Apr 15, 2026
Malicious code in chai-as-type (npm)
2 compromised versions
- Apr 15, 2026
Malicious code in forge-jsx (npm)
- Apr 15, 2026
Malicious code in bfx-hf-strategy-perf (npm)
1 compromised version
- Apr 15, 2026
Malware in tether-wrk-base
1 compromised version
- Apr 15, 2026
Malware in tensorzero-node
1 compromised version
- Apr 15, 2026
Malicious code in vs-supplier-portal-web (npm)
- Apr 15, 2026
Malicious code in fusion-events (npm)
- Apr 15, 2026
Malicious code in base-counter-web (npm)
- Apr 15, 2026
Malware in base-counter-web
1 compromised version
- Apr 15, 2026
Malware in fusion-events
1 compromised version
- Apr 15, 2026
Malware in vs-supplier-portal-web
1 compromised version
- Apr 15, 2026
Malicious code in @pnc-ref/harmony-support-v18 (npm)
- Apr 15, 2026
Malicious code in @pnc-ref/harmony-core-v18 (npm)
- Apr 15, 2026
Malicious code in @pnc-cib/cib-core-lib (npm)
- Apr 15, 2026
Malware in @pnc-ref/harmony-support-v18
1 compromised version
- Apr 15, 2026
Malware in @pnc-ref/harmony-core-v18
1 compromised version
- Apr 15, 2026
Malware in @pnc-cib/cib-core-lib
1 compromised version
- Apr 15, 2026
Malware in laserlogsink
1 compromised version
- Apr 15, 2026
Malicious code in com.baogong.app_push_permission (npm)
4 compromised versions
- Apr 15, 2026
Malware in com.baogong.app_push_permission
1 compromised version
- Apr 15, 2026
Malicious code in react-dom-19 (npm)
2 compromised versions
- Apr 15, 2026
Malicious code in tensorzero-node (npm)
1 compromised version
- Apr 15, 2026
Malicious code in @athena-ui-components/axios (npm)
1 compromised version
- Apr 15, 2026
Malicious code in @athena-ui-components/dashboard-widget (npm)
1 compromised version
- Apr 15, 2026
Malicious code in @athena-ui-components/deeplink (npm)
1 compromised version
- Apr 15, 2026
Malicious code in @jesusvizcaino2021/com.baogong.app-push-permission (npm)
1 compromised version
- Apr 15, 2026
Malicious code in js-logger-pack (npm)
29 compromised versions
- Apr 15, 2026
Malicious code in @veygo/component-library (npm)
1 compromised version
- Apr 15, 2026
Malware in cw-isdk
1 compromised version
- Apr 15, 2026
Malicious code in snitz-chief-cloud-config (npm)
- Apr 15, 2026
Malicious code in snitz-chief-cloud (npm)
- Apr 15, 2026
Malicious code in pdf-linker (npm)
- Apr 15, 2026
Malicious code in moscova-plural-json-parser (npm)
- Apr 15, 2026
Malicious code in chief-proxy-out (npm)
- Apr 15, 2026
Malicious code in chief-documentation (npm)
- Apr 15, 2026
Malware in snitz-chief-cloud-config
1 compromised version
- Apr 15, 2026
Malware in pdf-linker
1 compromised version
- Apr 15, 2026
Malware in snitz-chief-cloud
1 compromised version
- Apr 15, 2026
Malware in moscova-plural-json-parser
1 compromised version
- Apr 15, 2026
Malware in chief-documentation
1 compromised version
- Apr 15, 2026
Malware in chief-proxy-out
1 compromised version
- Apr 15, 2026
Malicious code in mongoose-stamps (npm)
- Apr 15, 2026
Malware in mongoose-stamps
1 compromised version
- Apr 15, 2026
Malicious code in ahmed_salem_ph (npm)
- Apr 15, 2026
Malware in ahmed_salem_ph
1 compromised version
- Apr 14, 2026
Malicious code in pnpm-workspaces (npm)
1 compromised version
- Apr 14, 2026
Malicious code in ckeditor5-minimap (npm)
1 compromised version
- Apr 14, 2026
Malicious code in tether-wrk-base (npm)
2 compromised versions
- Apr 14, 2026
Malicious code in @automation-toolchain/f5-cloud-libs (npm)
4 compromised versions
Page 127 of 4,804