Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,293 total in npm · sorted newest first- Mar 18, 2026
Malicious code in ui-core_mal (npm)
1 compromised version
- Mar 18, 2026
Malicious code in tss12111 (npm)
3 compromised versions
- Mar 18, 2026
Malicious code in tscom-geo (npm)
1 compromised version
- Mar 18, 2026
Malicious code in thread_ppe-test (npm)
1 compromised version
- Mar 18, 2026
Malicious code in testctfproject3 (npm)
1 compromised version
- Mar 18, 2026
Malicious code in testctfproject2 (npm)
2 compromised versions
- Mar 18, 2026
Malicious code in testctfproject1 (npm)
1 compromised version
- Mar 18, 2026
Malicious code in test-bugbounty-package-9 (npm)
1 compromised version
- Mar 18, 2026
Malicious code in test-bugbounty-package-6 (npm)
1 compromised version
- Mar 18, 2026
Malicious code in technical-assignment (npm)
2 compromised versions
- Mar 18, 2026
Malicious code in tdangularjs (npm)
2 compromised versions
- Mar 18, 2026
Malicious code in stylelint-preference (npm)
1 compromised version
- Mar 18, 2026
Malicious code in stnsxmp3 (npm)
1 compromised version
- Mar 18, 2026
Malicious code in stnsxmp (npm)
2 compromised versions
- Mar 18, 2026
Malicious code in static-content-cannabis (npm)
1 compromised version
- Mar 18, 2026
Malicious code in ssf-desktop-api-specification (npm)
2 compromised versions
- Mar 18, 2026
Malicious code in ssf-desktop-api-electron (npm)
1 compromised version
- Mar 18, 2026
Malicious code in solana-gateway-contracts-private (npm)
1 compromised version
- Mar 18, 2026
Malicious code in soft-nav (npm)
1 compromised version
- Mar 18, 2026
Malicious code in snort-security-tool (npm)
6 compromised versions
- Mar 18, 2026
Malicious code in smm-yt (npm)
1 compromised version
- Mar 18, 2026
Malicious code in skyoauth2 (npm)
1 compromised version
- Mar 18, 2026
Malicious code in sky-enablement (npm)
1 compromised version
- Mar 18, 2026
Malicious code in signer-app (npm)
1 compromised version
- Mar 18, 2026
Malicious code in signalk-poc-bug (npm)
1 compromised version
- Mar 18, 2026
Malicious code in signalk-bug-poc (npm)
1 compromised version
- Mar 18, 2026
Malicious code in shopify-ping-web (npm)
1 compromised version
- Mar 18, 2026
Malicious code in shopify-admin-web (npm)
1 compromised version
- Mar 18, 2026
Malicious code in sheinx (npm)
3 compromised versions
- Mar 18, 2026
Malicious code in safeness-sb-new (npm)
1 compromised version
- Mar 18, 2026
Malicious code in ref-selector (npm)
1 compromised version
- Mar 18, 2026
Malicious code in react-state-optimizer-core (npm)
16 compromised versions
- Mar 18, 2026
Malicious code in react-router-on-navigation (npm)
1 compromised version
- Mar 18, 2026
Malicious code in react-query-core-utils (npm)
12 compromised versions
- Mar 18, 2026
Malicious code in react-performance-suite (npm)
2 compromised versions
- Mar 18, 2026
Malicious code in react-fast-utilsa (npm)
4 compromised versions
- Mar 18, 2026
Malicious code in rce-pkg-2 (npm)
2 compromised versions
- Mar 18, 2026
Malicious code in rce-pkg-1 (npm)
2 compromised versions
- Mar 18, 2026
Malicious code in ranko887 (npm)
3 compromised versions
- Mar 18, 2026
Malicious code in rabbitmq-sdk (npm)
2 compromised versions
- Mar 18, 2026
Malicious code in r1dfg6789 (npm)
3 compromised versions
- Mar 18, 2026
Malicious code in pru-lib-ng (npm)
1 compromised version
- Mar 18, 2026
Malicious code in proleis-web-scanner (npm)
2 compromised versions
- Mar 18, 2026
Malicious code in proleis-web-gallery (npm)
3 compromised versions
- Mar 18, 2026
Malicious code in proleis-web-file-input (npm)
3 compromised versions
- Mar 18, 2026
Malicious code in proleis-web-app (npm)
2 compromised versions
- Mar 18, 2026
Malicious code in proleis-web-animations (npm)
3 compromised versions
- Mar 18, 2026
Malicious code in proleis-rest-client (npm)
3 compromised versions
- Mar 18, 2026
Malicious code in postcss-hotfix (npm)
3 compromised versions
- Mar 18, 2026
Malicious code in portal-lime (npm)
1 compromised version
Page 150 of 4,806