Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,293 total in npm · sorted newest first- Mar 20, 2026
Malicious code in supportgameapp (npm)
- Mar 20, 2026
Malware in supportgameapp
1 compromised version
- Mar 20, 2026
Malicious code in restaking-apy-module (npm)
- Mar 20, 2026
Malware in restaking-apy-module
1 compromised version
- Mar 20, 2026
Malicious code in json-parse-genie (npm)
- Mar 20, 2026
Malware in json-parse-genie
1 compromised version
- Mar 20, 2026
Malicious code in interface-builder-kit (npm)
- Mar 20, 2026
Malware in interface-builder-kit
1 compromised version
- Mar 20, 2026
Malicious code in jsonify-bundler (npm)
13 compromised versions
- Mar 20, 2026
Malware in jsonify-bundler
1 compromised version
- Mar 20, 2026
Malicious code in lint-builder (npm)
- Mar 20, 2026
Malicious code in big-nunber (npm)
- Mar 20, 2026
Malware in big-nunber
1 compromised version
- Mar 20, 2026
Malware in lint-builder
1 compromised version
- Mar 19, 2026
Malicious code in react-native-country-select (npm)
1 compromised version
- Mar 19, 2026
Malware in react-native-country-select
1 compromised version
- Mar 19, 2026
Malicious code in react-native-international-phone-number (npm)
1 compromised version
- Mar 19, 2026
Malware in react-native-international-phone-number
1 compromised version
- Mar 19, 2026
Malicious code in @iflow-mcp/watercrawl-watercrawl-mcp (npm)
5 compromised versions
- Mar 19, 2026
Malware in @iflow-mcp/watercrawl-watercrawl-mcp
1 compromised version
- Mar 19, 2026
Malicious code in @aifabrix/miso-client (npm)
1 compromised version
- Mar 19, 2026
Malware in @aifabrix/miso-client
1 compromised version
- Mar 19, 2026
Malicious code in changelog-logger-wrap (npm)
- Mar 19, 2026
Malicious code in changelog-logger-utils (npm)
- Mar 19, 2026
Malware in changelog-logger-utils
1 compromised version
- Mar 19, 2026
Malware in changelog-logger-wrap
1 compromised version
- Mar 19, 2026
Malicious code in tokenshower (npm)
5 compromised versions
- Mar 19, 2026
Malware in tokenshower
1 compromised version
- Mar 19, 2026
Malicious code in jsonify-parser (npm)
6 compromised versions
- Mar 19, 2026
Malware in jsonify-parser
1 compromised version
- Mar 19, 2026
Malicious code in nflx-release (npm)
1 compromised version
- Mar 19, 2026
Malicious code in wn-idv-persona-client (npm)
1 compromised version
- Mar 19, 2026
Malicious code in whatnot-web (npm)
1 compromised version
- Mar 19, 2026
Malicious code in whatnot-events (npm)
1 compromised version
- Mar 19, 2026
Malicious code in whatnot-manifests (npm)
1 compromised version
- Mar 19, 2026
Malicious code in browser-gaming-client (npm)
4 compromised versions
- Mar 19, 2026
Malicious code in nf-cl-ls (npm)
4 compromised versions
- Mar 18, 2026
Malicious code in chai-as-constrained (npm)
2 compromised versions
- Mar 18, 2026
Malware in chai-as-constrained
1 compromised version
- Mar 18, 2026
Malicious code in zip.js-2.8.2 (npm)
1 compromised version
- Mar 18, 2026
Malicious code in zero-develop-component-library (npm)
1 compromised version
- Mar 18, 2026
Malicious code in yahoo-commerce (npm)
1 compromised version
- Mar 18, 2026
Malicious code in wpt-client (npm)
1 compromised version
- Mar 18, 2026
Malicious code in wiz-redirects (npm)
1 compromised version
- Mar 18, 2026
Malicious code in wiz-production (npm)
1 compromised version
- Mar 18, 2026
Malicious code in wiz-prod (npm)
1 compromised version
- Mar 18, 2026
Malicious code in wiz-dev (npm)
2 compromised versions
- Mar 18, 2026
Malicious code in vvvv4234 (npm)
14 compromised versions
- Mar 18, 2026
Malicious code in user_migration (npm)
1 compromised version
- Mar 18, 2026
Malicious code in urti (npm)
4 compromised versions
Page 149 of 4,806