Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- Apr 13, 2026
Malware in wm-plugin-wm-smart-tip-dont-embed-tooltip
1 compromised version
- Apr 13, 2026
Malware in gp-auth-lib
1 compromised version
- Apr 13, 2026
Malicious code in twilio-video.js (npm)
- Apr 13, 2026
Malicious code in trade-in-lib (npm)
- Apr 13, 2026
Malicious code in stats-api-js-client (npm)
- Apr 13, 2026
Malicious code in ih-icon (npm)
- Apr 13, 2026
Malicious code in etsy-advocacy (npm)
- Apr 13, 2026
Malicious code in cms-site-api-js-client (npm)
- Apr 13, 2026
Malicious code in ccn-common-react-library (npm)
1 compromised version
- Apr 13, 2026
Malicious code in babel-plugin-fbtee (npm)
- Apr 13, 2026
Malware in etsy-advocacy
1 compromised version
- Apr 13, 2026
Malware in babel-plugin-fbtee
1 compromised version
- Apr 13, 2026
Malware in cms-site-api-js-client
1 compromised version
- Apr 13, 2026
Malware in ccn-common-react-library
1 compromised version
- Apr 13, 2026
Malware in ih-icon
1 compromised version
- Apr 13, 2026
Malware in trade-in-lib
1 compromised version
- Apr 13, 2026
Malware in twilio-video.js
1 compromised version
- Apr 13, 2026
Malware in stats-api-js-client
1 compromised version
- Apr 13, 2026
Malicious code in symphony-core (npm)
1 compromised version
- Apr 13, 2026
Malicious code in mdb-react-sortable (npm)
1 compromised version
- Apr 13, 2026
Malicious code in kaltura-ngx-client (npm)
- Apr 13, 2026
Malicious code in experian-design-system-themes (npm)
- Apr 13, 2026
Malicious code in dwaiter-company-web (npm)
1 compromised version
- Apr 13, 2026
Malware in dwaiter-company-web
1 compromised version
- Apr 13, 2026
Malware in experian-design-system-themes
1 compromised version
- Apr 13, 2026
Malware in mdb-react-sortable
1 compromised version
- Apr 13, 2026
Malware in symphony-core
1 compromised version
- Apr 13, 2026
Malware in kaltura-ngx-client
1 compromised version
- Apr 13, 2026
Malicious code in @b2b-portal/kit (npm)
- Apr 13, 2026
Malicious code in @b2b-portal/core (npm)
- Apr 13, 2026
Malware in @b2b-portal/kit
1 compromised version
- Apr 13, 2026
Malware in @b2b-portal/core
1 compromised version
- Apr 13, 2026
Malware in @b2b-portal/uch
1 compromised version
- Apr 13, 2026
Malware in @b2b-portal/form
1 compromised version
- Apr 13, 2026
Malicious code in pubnub-element (npm)
- Apr 13, 2026
Malicious code in babel-plugin-blocks (npm)
- Apr 13, 2026
Malicious code in seaport-core-16 (npm)
- Apr 13, 2026
Malicious code in markdownlint-rule-link-pattern (npm)
- Apr 12, 2026
Malicious code in bitu-staking (npm)
1 compromised version
- Apr 12, 2026
Malicious code in pt-sc-demo-app (npm)
1 compromised version
- Apr 12, 2026
Malicious code in pt-sc-logger (npm)
5 compromised versions
- Apr 12, 2026
Malicious code in upstart-offer-container (npm)
- Apr 12, 2026
Malicious code in upstartautoretailadmin (npm)
- Apr 12, 2026
Malicious code in upstartportal (npm)
1 compromised version
- Apr 12, 2026
Malicious code in upstartdr (npm)
1 compromised version
- Apr 12, 2026
Malicious code in upstartadmindashboard- (npm)
1 compromised version
- Apr 12, 2026
Malicious code in upstartloans (npm)
1 compromised version
- Apr 12, 2026
Malicious code in upstart-lending-status (npm)
1 compromised version
- Apr 12, 2026
Malicious code in upstartapplicationstatus (npm)
1 compromised version
- Apr 12, 2026
Malicious code in upstart-loan-status (npm)
1 compromised version
Page 131 of 4,804