Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- Apr 14, 2026
Malware in bytefrontier-core
1 compromised version
- Apr 14, 2026
Malware in use-feature-flags-plugin
1 compromised version
- Apr 14, 2026
Malware in bytefrontier
1 compromised version
- Apr 14, 2026
Malware in vip-landing
1 compromised version
- Apr 14, 2026
Malware in bytefrontier-partner
1 compromised version
- Apr 14, 2026
Malware in bytefrontier-sdk
1 compromised version
- Apr 14, 2026
Malware in onewin-landing
1 compromised version
- Apr 14, 2026
Malware in partner-tracker
1 compromised version
- Apr 14, 2026
Malware in ms-affiliate-links
1 compromised version
- Apr 14, 2026
Malware in billing-paywidget
1 compromised version
- Apr 14, 2026
Malware in partner-tracker-api
1 compromised version
- Apr 14, 2026
Malicious code in one-translations (npm)
1 compromised version
- Apr 14, 2026
Malware in one-translations
1 compromised version
- Apr 14, 2026
Malicious code in tailwind-lines-clamp (npm)
- Apr 14, 2026
Malware in tailwind-lines-clamp
1 compromised version
- Apr 14, 2026
Malware in seaport-core-16
1 compromised version
- Apr 14, 2026
Malware in markdownlint-rule-link-pattern
1 compromised version
- Apr 14, 2026
Malware in pubnub-element
1 compromised version
- Apr 14, 2026
Malware in babel-plugin-blocks
1 compromised version
- Apr 14, 2026
Malware in magentaa11y
1 compromised version
- Apr 14, 2026
Malicious code in percy-cake-docker (npm)
- Apr 14, 2026
Malware in percy-cake-docker
1 compromised version
- Apr 14, 2026
Malicious code in path-internal (npm)
16 compromised versions
- Apr 14, 2026
Malicious code in buffer-util-extend (npm)
11 compromised versions
- Apr 14, 2026
Malicious code in path-extend (npm)
14 compromised versions
- Apr 14, 2026
Malicious code in centralogger (npm)
- Apr 14, 2026
Malicious code in dom-utils-lite (npm)
- Apr 14, 2026
Malicious code in stacks-editor (npm)
1 compromised version
- Apr 14, 2026
Malicious code in getcardslib (npm)
10 compromised versions
- Apr 14, 2026
Malware in getcardslib
1 compromised version
- Apr 14, 2026
Malware in admin0911
1 compromised version
- Apr 13, 2026
Malware in @adac-fahrzeugplattform/ui
1 compromised version
- Apr 13, 2026
Malicious code in magentaa11y (npm)
1 compromised version
- Apr 13, 2026
Malware in @lamoda/seller-ui-kit
1 compromised version
- Apr 13, 2026
Malware in upstartapplicationstatus
1 compromised version
- Apr 13, 2026
Malware in upstartdr
1 compromised version
- Apr 13, 2026
Malware in upstartloans
1 compromised version
- Apr 13, 2026
Malware in upstart-offer-container
1 compromised version
- Apr 13, 2026
Malware in upstartportal
1 compromised version
- Apr 13, 2026
Malware in upstartadmindashboard-
1 compromised version
- Apr 13, 2026
Malware in upstart.previewcss
1 compromised version
- Apr 13, 2026
Malware in upstart-loan-status
1 compromised version
- Apr 13, 2026
Malicious code in walmart-internal (npm)
- Apr 13, 2026
Malware in upstart-lending-status
1 compromised version
- Apr 13, 2026
Malware in walmart-internal
1 compromised version
- Apr 13, 2026
Malware in paysafe-apple-pay
1 compromised version
- Apr 13, 2026
Malware in upstartautoretailadmin
1 compromised version
- Apr 13, 2026
Malware in paysafe-venmo
1 compromised version
- Apr 13, 2026
Malware in paysafe-payments-sdk-common
1 compromised version
- Apr 13, 2026
Malware in paysafe-google-pay
1 compromised version
Page 129 of 4,804