Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- Apr 14, 2026
Malicious code in ts-lint-builds (npm)
1 compromised version
- Apr 14, 2026
Malicious code in cjs-biginteger (npm)
3 compromised versions
- Apr 14, 2026
Malicious code in bjs-lint-builders (npm)
3 compromised versions
- Apr 14, 2026
Malicious code in bjs-lint-builder (npm)
1 compromised version
- Apr 14, 2026
Malicious code in bjs-biginteger (npm)
2 compromised versions
- Apr 14, 2026
Malicious code in tailwindcss-style-typography (npm)
- Apr 14, 2026
Malware in tailwindcss-style-typography
1 compromised version
- Apr 14, 2026
Malicious code in tailwind-typ (npm)
- Apr 14, 2026
Malware in tailwind-typ
1 compromised version
- Apr 14, 2026
Malicious code in tailwind-stylecss-typography (npm)
- Apr 14, 2026
Malware in tailwind-stylecss-typography
1 compromised version
- Apr 14, 2026
Malicious code in chai-as-refined (npm)
3 compromised versions
- Apr 14, 2026
Malware in chai-as-refined
1 compromised version
- Apr 14, 2026
Malicious code in ui-utils-udhay-alerts (npm)
3 compromised versions
- Apr 14, 2026
Malicious code in node-unpnotifyserv (npm)
- Apr 14, 2026
Malware in pt-sc-demo-app
1 compromised version
- Apr 14, 2026
Malware in ui-utils-udhay-alerts
1 compromised version
- Apr 14, 2026
Malware in pt-sc-logger
1 compromised version
- Apr 14, 2026
Malware in node-unpnotifyserv
1 compromised version
- Apr 14, 2026
Malicious code in okxglobal (npm)
2 compromised versions
- Apr 14, 2026
Malicious code in okx-nav (npm)
1 compromised version
- Apr 14, 2026
Malicious code in okx-data (npm)
2 compromised versions
- Apr 14, 2026
Malicious code in okfe-serverless-conf (npm)
2 compromised versions
- Apr 14, 2026
Malicious code in okassistant (npm)
1 compromised version
- Apr 14, 2026
Malicious code in chatbotloader (npm)
1 compromised version
- Apr 14, 2026
Malicious code in apmfe (npm)
1 compromised version
- Apr 14, 2026
Malware in apmfe
1 compromised version
- Apr 14, 2026
Malware in okx-data
1 compromised version
- Apr 14, 2026
Malware in okassistant
1 compromised version
- Apr 14, 2026
Malware in gprofiler
1 compromised version
- Apr 14, 2026
Malware in okx-nav
1 compromised version
- Apr 14, 2026
Malware in pinstatsd
1 compromised version
- Apr 14, 2026
Malware in chatbotloader
1 compromised version
- Apr 14, 2026
Malware in pinlogger
1 compromised version
- Apr 14, 2026
Malware in okfe-serverless-conf
1 compromised version
- Apr 14, 2026
Malware in okxglobal
1 compromised version
- Apr 14, 2026
Malicious code in vip-landing (npm)
1 compromised version
- Apr 14, 2026
Malicious code in use-feature-flags-plugin (npm)
1 compromised version
- Apr 14, 2026
Malicious code in onewin-landing (npm)
1 compromised version
- Apr 14, 2026
Malicious code in one-sdui (npm)
1 compromised version
- Apr 14, 2026
Malicious code in ms-affiliate-links (npm)
1 compromised version
- Apr 14, 2026
Malicious code in bytefrontier-core (npm)
1 compromised version
- Apr 14, 2026
Malicious code in bytefrontier (npm)
1 compromised version
- Apr 14, 2026
Malicious code in billing-paywidget (npm)
1 compromised version
- Apr 14, 2026
Malware in vv-ftend-api
1 compromised version
- Apr 14, 2026
Malware in bytefrontier-tracker
1 compromised version
- Apr 14, 2026
Malware in vv-ftend-core
1 compromised version
- Apr 14, 2026
Malware in bytefrontier-api
1 compromised version
- Apr 14, 2026
Malware in use-form-builder-plugin
1 compromised version
- Apr 14, 2026
Malware in one-sdui
1 compromised version
Page 128 of 4,804