Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- Mar 25, 2026
Malicious code in levex-refa (npm)
4 compromised versions
- Mar 25, 2026
Malware in levex-refa
1 compromised version
- Mar 25, 2026
Malware in ts-bign
1 compromised version
- Mar 25, 2026
Malicious code in simple-util-kit (npm)
- Mar 25, 2026
Malware in simple-util-kit
1 compromised version
- Mar 25, 2026
Malicious code in @shennmine/libsignal-node (npm)
- Mar 25, 2026
Malicious code in @shennmine/baileys (npm)
- Mar 25, 2026
Malware in @shennmine/baileys
1 compromised version
- Mar 25, 2026
Malware in @shennmine/libsignal-node
1 compromised version
- Mar 25, 2026
Malicious code in allergan (npm)
1 compromised version
- Mar 25, 2026
Malicious code in console-loggers (npm)
- Mar 25, 2026
Malware in console-loggers
1 compromised version
- Mar 25, 2026
Malicious code in chai-patch (npm)
- Mar 25, 2026
Malware in chai-patch
1 compromised version
- Mar 25, 2026
Malicious code in @rexxtheproject/keyed-db (npm)
- Mar 25, 2026
Malicious code in @rexxtheproject/elaina-libsignal (npm)
- Mar 25, 2026
Malicious code in @rexxtheproject/elaina-baileys (npm)
- Mar 25, 2026
Malware in @rexxtheproject/elaina-baileys
1 compromised version
- Mar 25, 2026
Malware in @rexxtheproject/elaina-libsignal
1 compromised version
- Mar 25, 2026
Malware in @rexxtheproject/keyed-db
1 compromised version
- Mar 25, 2026
Malicious code in chai-as-chain (npm)
4 compromised versions
- Mar 25, 2026
Malware in chai-as-chain
1 compromised version
- Mar 25, 2026
Malicious code in path-external (npm)
15 compromised versions
- Mar 25, 2026
Malicious code in @eric-orderbuddyinfo/react-noval (npm)
- Mar 25, 2026
Malware in @eric-orderbuddyinfo/react-noval
1 compromised version
- Mar 25, 2026
Malware in path-external
1 compromised version
- Mar 25, 2026
Malicious code in svg-sizer-responsive (npm)
- Mar 25, 2026
Malware in svg-sizer-responsive
1 compromised version
- Mar 25, 2026
Malicious code in chai-as-emitted (npm)
1 compromised version
- Mar 25, 2026
Malware in chai-as-emitted
1 compromised version
- Mar 25, 2026
Malicious code in pino-pretty-log (npm)
3 compromised versions
- Mar 25, 2026
Malware in pino-pretty-log
1 compromised version
- Mar 25, 2026
Malicious code in tailwind-animationbasis (npm)
- Mar 25, 2026
Malware in tailwind-animationbasis
1 compromised version
- Mar 25, 2026
Malware in revolut-merchant-widget
1 compromised version
- Mar 25, 2026
Malicious code in transitive_lib (npm)
- Mar 25, 2026
Malware in test_pkg_forppe
1 compromised version
- Mar 25, 2026
Malware in transitive_lib
1 compromised version
- Mar 25, 2026
Malicious code in @xvortexsockets/baileys (npm)
- Mar 25, 2026
Malware in @xvortexsockets/baileys
1 compromised version
- Mar 24, 2026
Malicious code in xrpl-hooks-ide (npm)
1 compromised version
- Mar 24, 2026
Malicious code in wraith-module (npm)
1 compromised version
- Mar 24, 2026
Malicious code in voodoo-internal-api (npm)
1 compromised version
- Mar 24, 2026
Malicious code in uuidvalidatorarabis (npm)
1 compromised version
- Mar 24, 2026
Malicious code in typescript-mock-data (npm)
1 compromised version
- Mar 24, 2026
Malicious code in this-is-my-test-package (npm)
4 compromised versions
- Mar 24, 2026
Malicious code in stormbreaker-shade (npm)
1 compromised version
- Mar 24, 2026
Malicious code in ssr-catalogue-sfcc (npm)
1 compromised version
- Mar 24, 2026
Malicious code in ssh-common (npm)
2 compromised versions
- Mar 24, 2026
Malicious code in spectral-module (npm)
1 compromised version
Page 138 of 4,804