Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,293 total in npm · sorted newest first- Mar 22, 2026
Malicious code in @emilgroup/task-sdk (npm)
3 compromised versions
- Mar 22, 2026
Malware in @emilgroup/task-sdk
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/public-api-sdk-node (npm)
2 compromised versions
- Mar 22, 2026
Malware in @emilgroup/public-api-sdk-node
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/commission-sdk-node (npm)
3 compromised versions
- Mar 22, 2026
Malware in @emilgroup/commission-sdk-node
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/setting-sdk-node (npm)
3 compromised versions
- Mar 22, 2026
Malware in @emilgroup/setting-sdk-node
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/changelog-sdk-node (npm)
2 compromised versions
- Mar 22, 2026
Malware in @emilgroup/changelog-sdk-node
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/tenant-sdk (npm)
2 compromised versions
- Mar 22, 2026
Malware in @emilgroup/tenant-sdk
1 compromised version
- Mar 22, 2026
Malicious code in eslint-config-service-users (npm)
1 compromised version
- Mar 22, 2026
Malware in eslint-config-service-users
1 compromised version
- Mar 22, 2026
Malicious code in @opengov/ppf-backend-types (npm)
1 compromised version
- Mar 22, 2026
Malware in @opengov/ppf-backend-types
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/docxtemplater-util (npm)
3 compromised versions
- Mar 22, 2026
Malware in @emilgroup/docxtemplater-util
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/gdv-sdk (npm)
2 compromised versions
- Mar 22, 2026
Malware in @emilgroup/gdv-sdk
1 compromised version
- Mar 22, 2026
Malicious code in @opengov/form-utils (npm)
1 compromised version
- Mar 22, 2026
Malware in @opengov/form-utils
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/tenant-sdk-node (npm)
2 compromised versions
- Mar 22, 2026
Malware in @emilgroup/tenant-sdk-node
1 compromised version
- Mar 22, 2026
Malicious code in @leafnoise/mirage (npm)
1 compromised version
- Mar 22, 2026
Malware in @leafnoise/mirage
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/partner-portal-sdk (npm)
3 compromised versions
- Mar 22, 2026
Malware in @emilgroup/partner-portal-sdk
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/partner-sdk-node (npm)
2 compromised versions
- Mar 22, 2026
Malware in @emilgroup/partner-sdk-node
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/auth-sdk-node (npm)
2 compromised versions
- Mar 22, 2026
Malware in @emilgroup/auth-sdk-node
1 compromised version
- Mar 22, 2026
Malicious code in jest-preset-ppf (npm)
1 compromised version
- Mar 22, 2026
Malware in jest-preset-ppf
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/account-sdk-node (npm)
2 compromised versions
- Mar 22, 2026
Malware in @emilgroup/account-sdk-node
1 compromised version
- Mar 22, 2026
Malicious code in @teale.io/eslint-config (npm)
8 compromised versions
- Mar 22, 2026
Malware in @teale.io/eslint-config
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/partner-portal-sdk-node (npm)
2 compromised versions
- Mar 22, 2026
Malware in @emilgroup/partner-portal-sdk-node
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/insurance-sdk-node (npm)
2 compromised versions
- Mar 22, 2026
Malware in @emilgroup/insurance-sdk-node
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/api-documentation (npm)
2 compromised versions
- Mar 22, 2026
Malware in @emilgroup/api-documentation
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/claim-sdk-node (npm)
2 compromised versions
- Mar 22, 2026
Malware in @emilgroup/claim-sdk-node
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/document-sdk (npm)
2 compromised versions
- Mar 22, 2026
Malware in @emilgroup/document-sdk
1 compromised version
- Mar 22, 2026
Malicious code in @emilgroup/billing-sdk (npm)
2 compromised versions
- Mar 22, 2026
Malware in @emilgroup/billing-sdk
1 compromised version
Page 145 of 4,806