Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,301 total in npm · sorted newest first- Mar 18, 2026
Malware in lit-a11y
1 compromised version
- Mar 18, 2026
Malware in no-type-assertion
1 compromised version
- Mar 18, 2026
Malware in vue-scoped-css
1 compromised version
- Mar 18, 2026
Malware in styled-components-a11y
1 compromised version
- Mar 18, 2026
Malware in transform-undefined-to-void
1 compromised version
- Mar 18, 2026
Malware in undeclared-variables-check
1 compromised version
- Mar 18, 2026
Malware in transform-jscript
1 compromised version
- Mar 18, 2026
Malware in minify-replace
1 compromised version
- Mar 18, 2026
Malware in transform-remove-debugger
1 compromised version
- Mar 18, 2026
Malware in @storylane/uikit
1 compromised version
- Mar 18, 2026
Malware in @storylane/shared-packages
1 compromised version
- Mar 18, 2026
Malware in vitest-globals
1 compromised version
- Mar 18, 2026
Malware in transform-property-literals
1 compromised version
- Mar 18, 2026
Malware in transform-simplify-comparison-operators
1 compromised version
- Mar 18, 2026
Malware in transform-minify-booleans
1 compromised version
- Mar 18, 2026
Malware in better-styled-components
1 compromised version
- Mar 18, 2026
Malware in transform-jsbi-to-bigint
1 compromised version
- Mar 18, 2026
Malware in typescript-operations
1 compromised version
- Mar 18, 2026
Malware in transform-react-jsx
1 compromised version
- Mar 17, 2026
Malicious code in whatfix-icons (npm)
2 compromised versions
- Mar 17, 2026
Malicious code in navi-design-system (npm)
3 compromised versions
- Mar 17, 2026
Malicious code in pino-logger-utils (npm)
2 compromised versions
- Mar 17, 2026
Malware in pino-logger-utils
1 compromised version
- Mar 17, 2026
Malware in @augmentor/experiences
1 compromised version
- Mar 17, 2026
Malicious code in strapi-plugin-workspace-plugin (npm)
- Mar 17, 2026
Malicious code in ember-power-calendar-utils (npm)
- Mar 17, 2026
Malware in ember-power-calendar-utils
1 compromised version
- Mar 17, 2026
Malware in vitest-config
1 compromised version
- Mar 17, 2026
Malware in strapi-plugin-workspace-plugin
1 compromised version
- Mar 17, 2026
Malicious code in asset-delivery (npm)
- Mar 17, 2026
Malware in asset-delivery
1 compromised version
- Mar 17, 2026
Malicious code in graphlib-js (npm)
6 compromised versions
- Mar 17, 2026
Malware in graphlib-js
1 compromised version
- Mar 16, 2026
Malicious code in revolut-merchant-widget (npm)
1 compromised version
- Mar 16, 2026
Malicious code in wordpecker-fx (npm)
- Mar 16, 2026
Malicious code in supply-hx (npm)
- Mar 16, 2026
Malicious code in jalalstealer (npm)
- Mar 16, 2026
Malicious code in delta666 (npm)
- Mar 16, 2026
Malicious code in alinet (npm)
- Mar 16, 2026
Malicious code in aesdecryptor (npm)
2 compromised versions
- Mar 16, 2026
Malware in wordpecker-fx
1 compromised version
- Mar 16, 2026
Malware in jalalstealer
1 compromised version
- Mar 16, 2026
Malware in supply-hx
1 compromised version
- Mar 16, 2026
Malware in aesdecryptor
1 compromised version
- Mar 16, 2026
Malware in alinet
1 compromised version
- Mar 16, 2026
Malware in delta666
1 compromised version
- Mar 16, 2026
Malware in alinet-w
1 compromised version
- Mar 16, 2026
Malicious code in n8n-nodes-xml-utils (npm)
- Mar 16, 2026
Malicious code in n8n-nodes-text-utils (npm)
- Mar 16, 2026
Malicious code in n8n-nodes-json-helper (npm)
Page 157 of 4,807