Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,293 total in npm · sorted newest first- Mar 21, 2026
Malicious code in address-autocompletetest (npm)
1 compromised version
- Mar 21, 2026
Malicious code in characterai-poc (npm)
1 compromised version
- Mar 21, 2026
Malicious code in cms-catalogue (npm)
2 compromised versions
- Mar 21, 2026
Malicious code in yelp-react-component-badge (npm)
1 compromised version
- Mar 21, 2026
Malicious code in repo-typescript-config (npm)
3 compromised versions
- Mar 21, 2026
Malicious code in nintendoamerica-ncom (npm)
4 compromised versions
- Mar 21, 2026
Malicious code in uniswap-info (npm)
1 compromised version
- Mar 20, 2026
Malicious code in shakti-strings (npm)
1 compromised version
- Mar 20, 2026
Malicious code in nflx-cmisc (npm)
1 compromised version
- Mar 20, 2026
Malicious code in laserlogsink (npm)
4 compromised versions
- Mar 20, 2026
Malicious code in delphoi (npm)
1 compromised version
- Mar 20, 2026
Malicious code in bic-seo (npm)
1 compromised version
- Mar 20, 2026
Malicious code in puzzle-gateway (npm)
1 compromised version
- Mar 20, 2026
Malicious code in ty-web-session (npm)
1 compromised version
- Mar 20, 2026
Malicious code in uipathisfun (npm)
22 compromised versions
- Mar 20, 2026
Malicious code in chai-as-chayn (npm)
1 compromised version
- Mar 20, 2026
Malware in chai-as-chayn
1 compromised version
- Mar 20, 2026
Malicious code in innocent-pkg (npm)
- Mar 20, 2026
Malware in innocent-pkg
1 compromised version
- Mar 20, 2026
Malware in @get-wrecked/overlay
1 compromised version
- Mar 20, 2026
Malicious code in @fr3newera/baileys (npm)
- Mar 20, 2026
Malware in @fr3newera/baileys
1 compromised version
- Mar 20, 2026
Malicious code in xyztttxyz (npm)
- Mar 20, 2026
Malicious code in xyzttt (npm)
- Mar 20, 2026
Malware in xyzttt
1 compromised version
- Mar 20, 2026
Malware in xyztttxyz
1 compromised version
- Mar 20, 2026
Malicious code in svg-content-validation (npm)
- Mar 20, 2026
Malware in svg-content-validation
1 compromised version
- Mar 20, 2026
Malicious code in json-specular (npm)
2 compromised versions
- Mar 20, 2026
Malicious code in json-bundling (npm)
1 compromised version
- Mar 20, 2026
Malware in json-specular
1 compromised version
- Mar 20, 2026
Malware in json-bundling
1 compromised version
- Mar 20, 2026
Malicious code in rollup-plugin-polyfill-utils (npm)
- Mar 20, 2026
Malware in rollup-plugin-polyfill-utils
1 compromised version
- Mar 20, 2026
Malicious code in novi-cli (npm)
- Mar 20, 2026
Malicious code in couplus-cli (npm)
- Mar 20, 2026
Malware in couplus-cli
1 compromised version
- Mar 20, 2026
Malware in novi-cli
1 compromised version
- Mar 20, 2026
Malicious code in woltpickerapp (npm)
1 compromised version
- Mar 20, 2026
Malware in woltpickerapp
1 compromised version
- Mar 20, 2026
Malicious code in cryptopapi (npm)
- Mar 20, 2026
Malware in cryptopapi
1 compromised version
- Mar 20, 2026
Malicious code in kyxserver-everything (npm)
- Mar 20, 2026
Malicious code in kyxhiagent123 (npm)
- Mar 20, 2026
Malicious code in kyxhiagent (npm)
- Mar 20, 2026
Malicious code in hiagenttest (npm)
- Mar 20, 2026
Malware in kyxhiagent
1 compromised version
- Mar 20, 2026
Malware in hiagenttest
1 compromised version
- Mar 20, 2026
Malware in kyxhiagent123
1 compromised version
- Mar 20, 2026
Malware in kyxserver-everything
1 compromised version
Page 147 of 4,806