Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,293 total in npm · sorted newest first- Mar 25, 2026
Malware in @rexxtheproject/elaina-baileys
1 compromised version
- Mar 25, 2026
Malware in @rexxtheproject/elaina-libsignal
1 compromised version
- Mar 25, 2026
Malware in @rexxtheproject/keyed-db
1 compromised version
- Mar 25, 2026
Malicious code in chai-as-chain (npm)
4 compromised versions
- Mar 25, 2026
Malware in chai-as-chain
1 compromised version
- Mar 25, 2026
Malicious code in path-external (npm)
15 compromised versions
- Mar 25, 2026
Malicious code in @eric-orderbuddyinfo/react-noval (npm)
- Mar 25, 2026
Malware in @eric-orderbuddyinfo/react-noval
1 compromised version
- Mar 25, 2026
Malware in path-external
1 compromised version
- Mar 25, 2026
Malicious code in svg-sizer-responsive (npm)
- Mar 25, 2026
Malware in svg-sizer-responsive
1 compromised version
- Mar 25, 2026
Malicious code in chai-as-emitted (npm)
1 compromised version
- Mar 25, 2026
Malware in chai-as-emitted
1 compromised version
- Mar 25, 2026
Malicious code in pino-pretty-log (npm)
3 compromised versions
- Mar 25, 2026
Malware in pino-pretty-log
1 compromised version
- Mar 25, 2026
Malicious code in tailwind-animationbasis (npm)
- Mar 25, 2026
Malware in tailwind-animationbasis
1 compromised version
- Mar 25, 2026
Malware in revolut-merchant-widget
1 compromised version
- Mar 25, 2026
Malicious code in transitive_lib (npm)
- Mar 25, 2026
Malware in test_pkg_forppe
1 compromised version
- Mar 25, 2026
Malware in transitive_lib
1 compromised version
- Mar 25, 2026
Malicious code in @xvortexsockets/baileys (npm)
- Mar 25, 2026
Malware in @xvortexsockets/baileys
1 compromised version
- Mar 24, 2026
Malicious code in xrpl-hooks-ide (npm)
1 compromised version
- Mar 24, 2026
Malicious code in wraith-module (npm)
1 compromised version
- Mar 24, 2026
Malicious code in voodoo-internal-api (npm)
1 compromised version
- Mar 24, 2026
Malicious code in uuidvalidatorarabis (npm)
1 compromised version
- Mar 24, 2026
Malicious code in typescript-mock-data (npm)
1 compromised version
- Mar 24, 2026
Malicious code in this-is-my-test-package (npm)
4 compromised versions
- Mar 24, 2026
Malicious code in stormbreaker-shade (npm)
1 compromised version
- Mar 24, 2026
Malicious code in ssr-catalogue-sfcc (npm)
1 compromised version
- Mar 24, 2026
Malicious code in ssh-common (npm)
2 compromised versions
- Mar 24, 2026
Malicious code in spectral-module (npm)
1 compromised version
- Mar 24, 2026
Malicious code in spectral-engine (npm)
1 compromised version
- Mar 24, 2026
Malicious code in securefiles-common (npm)
2 compromised versions
- Mar 24, 2026
Malicious code in react-native-forter (npm)
1 compromised version
- Mar 24, 2026
Malicious code in product-status (npm)
1 compromised version
- Mar 24, 2026
Malicious code in piyush_test_vadapav (npm)
1 compromised version
- Mar 24, 2026
Malicious code in phantom-module (npm)
2 compromised versions
- Mar 24, 2026
Malicious code in osc-datagrid-validator (npm)
1 compromised version
- Mar 24, 2026
Malicious code in onb-enrichment (npm)
1 compromised version
- Mar 24, 2026
Malicious code in nodecognivault (npm)
1 compromised version
- Mar 24, 2026
Malicious code in node-neurograde (npm)
1 compromised version
- Mar 24, 2026
Malicious code in node-multer (npm)
1 compromised version
- Mar 24, 2026
Malicious code in no-function-declare-after-return (npm)
1 compromised version
- Mar 24, 2026
Malicious code in nf-promise-state-machine (npm)
2 compromised versions
- Mar 24, 2026
Malicious code in nf-console (npm)
2 compromised versions
- Mar 24, 2026
Malicious code in my-not-little-durgham (npm)
1 compromised version
- Mar 24, 2026
Malicious code in my-little-durgham (npm)
1 compromised version
- Mar 24, 2026
Malicious code in mollie-api-adapter-poc (npm)
3 compromised versions
Page 141 of 4,806