Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- Mar 26, 2026
Malicious code in @pumpfun-ipfs/sdk (npm)
- Mar 26, 2026
Malware in @pumpfun-ipfs/sdk
1 compromised version
- Mar 26, 2026
Malware in jito-validator-sdk
1 compromised version
- Mar 26, 2026
Malware in neanderthal-validator
1 compromised version
- Mar 26, 2026
Malware in @solana-ipfs/sdk
1 compromised version
- Mar 26, 2026
Malware in validator-lut-sdk
1 compromised version
- Mar 26, 2026
Malware in @solmasterv3/solana-metadata-sdk
1 compromised version
- Mar 26, 2026
Malicious code in node-coremesh (npm)
1 compromised version
- Mar 26, 2026
Malicious code in chain-coremesh (npm)
1 compromised version
- Mar 26, 2026
Malware in chain-coremesh
1 compromised version
- Mar 26, 2026
Malware in node-coremesh
1 compromised version
- Mar 26, 2026
Malicious code in react-leaflet-marker-layer (npm)
1 compromised version
- Mar 26, 2026
Malicious code in react-autolink-text (npm)
1 compromised version
- Mar 26, 2026
Malicious code in @virtahealth/substrate-root (npm)
1 compromised version
- Mar 26, 2026
Malicious code in @opengov/qa-record-types-api (npm)
1 compromised version
- Mar 26, 2026
Malicious code in @opengov/form-renderer (npm)
1 compromised version
- Mar 26, 2026
Malicious code in @opengov/form-builder (npm)
1 compromised version
- Mar 26, 2026
Malicious code in @emilgroup/translation-sdk-node (npm)
2 compromised versions
- Mar 26, 2026
Malicious code in @emilgroup/setting-sdk (npm)
3 compromised versions
- Mar 26, 2026
Malicious code in @emilgroup/process-manager-sdk-node (npm)
2 compromised versions
- Mar 26, 2026
Malicious code in @emilgroup/process-manager-sdk (npm)
2 compromised versions
- Mar 26, 2026
Malicious code in @emilgroup/partner-sdk (npm)
3 compromised versions
- Mar 26, 2026
Malicious code in @emilgroup/numbergenerator-sdk-node (npm)
3 compromised versions
- Mar 26, 2026
Malicious code in @emilgroup/discount-sdk-node (npm)
2 compromised versions
- Mar 26, 2026
Malicious code in @emilgroup/commission-sdk (npm)
3 compromised versions
- Mar 26, 2026
Malware in cr-static-shared-components
1 compromised version
- Mar 26, 2026
Malicious code in @universeorg/dotenv (npm)
- Mar 26, 2026
Malicious code in @rexorg/config (npm)
2 compromised versions
- Mar 26, 2026
Malware in @rexorg/config
1 compromised version
- Mar 26, 2026
Malware in @universeorg/dotenv
1 compromised version
- Mar 25, 2026
Malicious code in json-lucide (npm)
5 compromised versions
- Mar 25, 2026
Malware in json-lucide
1 compromised version
- Mar 25, 2026
Malicious code in omicnavigatorwebapp (npm)
- Mar 25, 2026
Malicious code in omaronsec (npm)
- Mar 25, 2026
Malware in allergan
1 compromised version
- Mar 25, 2026
Malware in omaronsec
1 compromised version
- Mar 25, 2026
Malware in omicnavigatorwebapp
1 compromised version
- Mar 25, 2026
Malicious code in tailwind-compile (npm)
1 compromised version
- Mar 25, 2026
Malware in tailwind-compile
1 compromised version
- Mar 25, 2026
Malicious code in super-alias (npm)
- Mar 25, 2026
Malicious code in ffsixx (npm)
- Mar 25, 2026
Malicious code in @sixcore/baileys (npm)
- Mar 25, 2026
Malware in ffsixx
1 compromised version
- Mar 25, 2026
Malware in super-alias
1 compromised version
- Mar 25, 2026
Malware in @sixcore/baileys
1 compromised version
- Mar 25, 2026
Malicious code in changelog-utils-wrapper (npm)
- Mar 25, 2026
Malicious code in changelog-utils-logger (npm)
- Mar 25, 2026
Malware in changelog-utils-logger
1 compromised version
- Mar 25, 2026
Malware in changelog-utils-wrapper
1 compromised version
- Mar 25, 2026
Malicious code in ts-bign (npm)
Page 137 of 4,804