Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,293 total in npm · sorted newest first- Mar 23, 2026
Malicious code in milla-migration (npm)
- Mar 23, 2026
Malicious code in internal-linking (npm)
- Mar 23, 2026
Malicious code in in-app-marketing (npm)
- Mar 23, 2026
Malicious code in falcor-server (npm)
- Mar 23, 2026
Malware in falcor-server
1 compromised version
- Mar 23, 2026
Malware in pulse-rsvp-card-entity
1 compromised version
- Mar 23, 2026
Malware in shakti-pwa
1 compromised version
- Mar 23, 2026
Malware in internal-linking
1 compromised version
- Mar 23, 2026
Malware in milla-migration
1 compromised version
- Mar 23, 2026
Malware in sidebar-basket
1 compromised version
- Mar 23, 2026
Malware in ty-search-suggestion
1 compromised version
- Mar 23, 2026
Malware in pulse-shop-section
1 compromised version
- Mar 23, 2026
Malware in pulse-scroll-triggered-list-items
1 compromised version
- Mar 23, 2026
Malware in in-app-marketing
1 compromised version
- Mar 23, 2026
Malicious code in ty-fragment-core (npm)
- Mar 23, 2026
Malicious code in ty-config-provider (npm)
- Mar 23, 2026
Malicious code in storefront-logger (npm)
- Mar 23, 2026
Malicious code in sfx-event-bridge (npm)
- Mar 23, 2026
Malicious code in sd-basket-highlight (npm)
- Mar 23, 2026
Malicious code in puzzle-render-kit (npm)
- Mar 23, 2026
Malicious code in puzzle-asset (npm)
- Mar 23, 2026
Malicious code in pulse-feature-flag (npm)
- Mar 23, 2026
Malicious code in netflixidentity (npm)
- Mar 23, 2026
Malicious code in netflixid (npm)
- Mar 23, 2026
Malware in sd-basket-highlight
1 compromised version
- Mar 23, 2026
Malware in storefront-logger
1 compromised version
- Mar 23, 2026
Malware in pulse-feature-flag
1 compromised version
- Mar 23, 2026
Malware in ty-fragment-core
1 compromised version
- Mar 23, 2026
Malware in ty-config-provider
1 compromised version
- Mar 23, 2026
Malware in netflixidentity
1 compromised version
- Mar 23, 2026
Malware in netflixid
1 compromised version
- Mar 23, 2026
Malware in puzzle-asset
1 compromised version
- Mar 23, 2026
Malware in puzzle-render-kit
1 compromised version
- Mar 23, 2026
Malware in sfx-event-bridge
1 compromised version
- Mar 23, 2026
Malicious code in uipagain (npm)
1 compromised version
- Mar 23, 2026
Malware in uipathisfun
1 compromised version
- Mar 22, 2026
Malicious code in unhandledrejection1 (npm)
1 compromised version
- Mar 22, 2026
Malicious code in @thiagoemmanuell/unhandledrejection (npm)
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/document-sdk-node (npm)
6 compromised versions
- Mar 22, 2026
Malware in @emilgroup/document-sdk-node
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/discount-sdk (npm)
3 compromised versions
- Mar 22, 2026
Malware in @emilgroup/discount-sdk
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/task-sdk-node (npm)
3 compromised versions
- Mar 22, 2026
Malware in @emilgroup/task-sdk-node
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/document-uploader (npm)
3 compromised versions
- Mar 22, 2026
Malware in @emilgroup/document-uploader
1 compromised version
- Mar 22, 2026
Malicious code in @airtm/uuid-base32 (npm)
1 compromised version
- Mar 22, 2026
Malware in @airtm/uuid-base32
1 compromised version
- Mar 22, 2026
Malicious code in cit-playwright-tests (npm)
1 compromised version
- Mar 22, 2026
Malware in cit-playwright-tests
1 compromised version
Page 144 of 4,806