Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,293 total in npm · sorted newest first- Mar 27, 2026
Malicious code in chai-as-added (npm)
1 compromised version
- Mar 27, 2026
Malware in chai-as-added
1 compromised version
- Mar 27, 2026
Malicious code in testtestsharp (npm)
1 compromised version
- Mar 27, 2026
Malicious code in test1sharp (npm)
24 compromised versions
- Mar 27, 2026
Malware in test1sharp
1 compromised version
- Mar 27, 2026
Malware in testtestsharp
1 compromised version
- Mar 27, 2026
Malicious code in cua-primitives-server (npm)
- Mar 27, 2026
Malicious code in @ev-tech/eva-container-api (npm)
1 compromised version
- Mar 27, 2026
Malware in cua-primitives-server
1 compromised version
- Mar 27, 2026
Malware in @ev-tech/eva-container-api
1 compromised version
- Mar 27, 2026
Malware in shopping-cart-service
1 compromised version
- Mar 27, 2026
Malware in shopmacher-mollie-application
1 compromised version
- Mar 27, 2026
Malicious code in shop-republik-ch (npm)
- Mar 27, 2026
Malware in shop-republik-ch
1 compromised version
- Mar 27, 2026
Malware in native_dep
1 compromised version
- Mar 26, 2026
Malicious code in browserstack-electron-forge-include-package-plugin (npm)
1 compromised version
- Mar 26, 2026
Malicious code in spr-i18n-labels (npm)
5 compromised versions
- Mar 26, 2026
Malicious code in jsonify-builder (npm)
1 compromised version
- Mar 26, 2026
Malware in jsonify-builder
1 compromised version
- Mar 26, 2026
Malicious code in onboarding-server (npm)
1 compromised version
- Mar 26, 2026
Malicious code in srcsrctest (npm)
2 compromised versions
- Mar 26, 2026
Malicious code in security-install-analytics (npm)
1 compromised version
- Mar 26, 2026
Malicious code in @zecho/libsignal (npm)
- Mar 26, 2026
Malicious code in @zecho/baileys-mod (npm)
- Mar 26, 2026
Malware in @zecho/baileys-mod
1 compromised version
- Mar 26, 2026
Malware in @zecho/libsignal
1 compromised version
- Mar 26, 2026
Malicious code in @validator-lut-sdk/v3 (npm)
- Mar 26, 2026
Malware in @validator-lut-sdk/v3
1 compromised version
- Mar 26, 2026
Malicious code in validator-lut-sdk (npm)
- Mar 26, 2026
Malicious code in neanderthal-validator (npm)
1 compromised version
- Mar 26, 2026
Malicious code in jito-validator-sdk (npm)
- Mar 26, 2026
Malicious code in @solmasterv3/solana-metadata-sdk (npm)
- Mar 26, 2026
Malicious code in @solana-ipfs/sdk (npm)
- Mar 26, 2026
Malicious code in @pumpfun-ipfs/sdk (npm)
- Mar 26, 2026
Malware in @pumpfun-ipfs/sdk
1 compromised version
- Mar 26, 2026
Malware in jito-validator-sdk
1 compromised version
- Mar 26, 2026
Malware in neanderthal-validator
1 compromised version
- Mar 26, 2026
Malware in @solana-ipfs/sdk
1 compromised version
- Mar 26, 2026
Malware in validator-lut-sdk
1 compromised version
- Mar 26, 2026
Malware in @solmasterv3/solana-metadata-sdk
1 compromised version
- Mar 26, 2026
Malicious code in node-coremesh (npm)
1 compromised version
- Mar 26, 2026
Malicious code in chain-coremesh (npm)
1 compromised version
- Mar 26, 2026
Malware in chain-coremesh
1 compromised version
- Mar 26, 2026
Malware in node-coremesh
1 compromised version
- Mar 26, 2026
Malicious code in react-leaflet-marker-layer (npm)
1 compromised version
- Mar 26, 2026
Malicious code in react-autolink-text (npm)
1 compromised version
- Mar 26, 2026
Malicious code in @virtahealth/substrate-root (npm)
1 compromised version
- Mar 26, 2026
Malicious code in @opengov/qa-record-types-api (npm)
1 compromised version
- Mar 26, 2026
Malicious code in @opengov/form-renderer (npm)
1 compromised version
- Mar 26, 2026
Malicious code in @opengov/form-builder (npm)
1 compromised version
Page 139 of 4,806