Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,293 total in npm · sorted newest first- Mar 26, 2026
Malicious code in @emilgroup/translation-sdk-node (npm)
2 compromised versions
- Mar 26, 2026
Malicious code in @emilgroup/setting-sdk (npm)
3 compromised versions
- Mar 26, 2026
Malicious code in @emilgroup/process-manager-sdk-node (npm)
2 compromised versions
- Mar 26, 2026
Malicious code in @emilgroup/process-manager-sdk (npm)
2 compromised versions
- Mar 26, 2026
Malicious code in @emilgroup/partner-sdk (npm)
3 compromised versions
- Mar 26, 2026
Malicious code in @emilgroup/numbergenerator-sdk-node (npm)
3 compromised versions
- Mar 26, 2026
Malicious code in @emilgroup/discount-sdk-node (npm)
2 compromised versions
- Mar 26, 2026
Malicious code in @emilgroup/commission-sdk (npm)
3 compromised versions
- Mar 26, 2026
Malware in cr-static-shared-components
1 compromised version
- Mar 26, 2026
Malicious code in @universeorg/dotenv (npm)
- Mar 26, 2026
Malicious code in @rexorg/config (npm)
2 compromised versions
- Mar 26, 2026
Malware in @rexorg/config
1 compromised version
- Mar 26, 2026
Malware in @universeorg/dotenv
1 compromised version
- Mar 25, 2026
Malicious code in json-lucide (npm)
5 compromised versions
- Mar 25, 2026
Malware in json-lucide
1 compromised version
- Mar 25, 2026
Malicious code in omicnavigatorwebapp (npm)
- Mar 25, 2026
Malicious code in omaronsec (npm)
- Mar 25, 2026
Malware in allergan
1 compromised version
- Mar 25, 2026
Malware in omaronsec
1 compromised version
- Mar 25, 2026
Malware in omicnavigatorwebapp
1 compromised version
- Mar 25, 2026
Malicious code in tailwind-compile (npm)
1 compromised version
- Mar 25, 2026
Malware in tailwind-compile
1 compromised version
- Mar 25, 2026
Malicious code in super-alias (npm)
- Mar 25, 2026
Malicious code in ffsixx (npm)
- Mar 25, 2026
Malicious code in @sixcore/baileys (npm)
- Mar 25, 2026
Malware in ffsixx
1 compromised version
- Mar 25, 2026
Malware in super-alias
1 compromised version
- Mar 25, 2026
Malware in @sixcore/baileys
1 compromised version
- Mar 25, 2026
Malicious code in changelog-utils-wrapper (npm)
- Mar 25, 2026
Malicious code in changelog-utils-logger (npm)
- Mar 25, 2026
Malware in changelog-utils-logger
1 compromised version
- Mar 25, 2026
Malware in changelog-utils-wrapper
1 compromised version
- Mar 25, 2026
Malicious code in ts-bign (npm)
- Mar 25, 2026
Malicious code in levex-refa (npm)
4 compromised versions
- Mar 25, 2026
Malware in levex-refa
1 compromised version
- Mar 25, 2026
Malware in ts-bign
1 compromised version
- Mar 25, 2026
Malicious code in simple-util-kit (npm)
- Mar 25, 2026
Malware in simple-util-kit
1 compromised version
- Mar 25, 2026
Malicious code in @shennmine/libsignal-node (npm)
- Mar 25, 2026
Malicious code in @shennmine/baileys (npm)
- Mar 25, 2026
Malware in @shennmine/baileys
1 compromised version
- Mar 25, 2026
Malware in @shennmine/libsignal-node
1 compromised version
- Mar 25, 2026
Malicious code in allergan (npm)
1 compromised version
- Mar 25, 2026
Malicious code in console-loggers (npm)
- Mar 25, 2026
Malware in console-loggers
1 compromised version
- Mar 25, 2026
Malicious code in chai-patch (npm)
- Mar 25, 2026
Malware in chai-patch
1 compromised version
- Mar 25, 2026
Malicious code in @rexxtheproject/keyed-db (npm)
- Mar 25, 2026
Malicious code in @rexxtheproject/elaina-libsignal (npm)
- Mar 25, 2026
Malicious code in @rexxtheproject/elaina-baileys (npm)
Page 140 of 4,806