Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,301 total in npm · sorted newest first- Mar 16, 2026
Malicious code in n8n-nodes-format-utils (npm)
- Mar 16, 2026
Malicious code in n8n-nodes-data-transform (npm)
- Mar 16, 2026
Malicious code in n8n-nodes-csv-parse (npm)
- Mar 16, 2026
Malware in n8n-nodes-text-helpers
1 compromised version
- Mar 16, 2026
Malware in n8n-nodes-text-utils
1 compromised version
- Mar 16, 2026
Malware in n8n-nodes-xml-utils
1 compromised version
- Mar 16, 2026
Malware in n8n-nodes-csv-parse
1 compromised version
- Mar 16, 2026
Malware in n8n-nodes-json-helper
1 compromised version
- Mar 16, 2026
Malware in n8n-nodes-format-utils
1 compromised version
- Mar 16, 2026
Malware in n8n-nodes-data-transform
1 compromised version
- Mar 16, 2026
Malicious code in supplychain-security-demo (npm)
- Mar 16, 2026
Malicious code in hariprasath (npm)
- Mar 16, 2026
Malware in supplychain-security-demo
1 compromised version
- Mar 16, 2026
Malware in hariprasath
1 compromised version
- Mar 16, 2026
Malicious code in @jaime9008/math-service (npm)
3 compromised versions
- Mar 16, 2026
Malicious code in pretty-changelog-logger (npm)
- Mar 16, 2026
Malicious code in polymarket-validator (npm)
2 compromised versions
- Mar 16, 2026
Malicious code in changelog-logger-wrapper (npm)
- Mar 16, 2026
Malicious code in changelog-logger-utilities (npm)
- Mar 16, 2026
Malware in changelog-logger-utilities
1 compromised version
- Mar 16, 2026
Malware in polymarket-validator
1 compromised version
- Mar 16, 2026
Malware in changelog-logger-wrapper
1 compromised version
- Mar 16, 2026
Malware in pretty-changelog-logger
1 compromised version
- Mar 16, 2026
Malicious code in npm-demoo-1111 (npm)
- Mar 16, 2026
Malicious code in npm-demo-1112 (npm)
- Mar 16, 2026
Malware in npm-demo-1112
1 compromised version
- Mar 16, 2026
Malware in npm-demoo-1111
1 compromised version
- Mar 16, 2026
Malware in @wealth-common/font
1 compromised version
- Mar 16, 2026
Malicious code in trello-enterprises (npm)
- Mar 16, 2026
Malicious code in react-refresh-update (npm)
- Mar 16, 2026
Malicious code in internal-lib-vulnerable (npm)
- Mar 16, 2026
Malicious code in vitest-config (npm)
- Mar 16, 2026
Malicious code in @wealth-common/font (npm)
1 compromised version
- Mar 16, 2026
Malicious code in @myisrfn/baileys-mod (npm)
- Mar 16, 2026
Malware in @myisrfn/baileys-mod
1 compromised version
- Mar 16, 2026
Malicious code in @sheniraid/libsignal-node (npm)
- Mar 16, 2026
Malicious code in @sheniraid/baileys (npm)
- Mar 16, 2026
Malware in @sheniraid/libsignal-node
1 compromised version
- Mar 16, 2026
Malware in @sheniraid/baileys
1 compromised version
- Mar 16, 2026
Malicious code in es-lint-builder (npm)
- Mar 16, 2026
Malicious code in big-numben (npm)
- Mar 16, 2026
Malware in es-lint-builder
1 compromised version
- Mar 16, 2026
Malware in big-numben
1 compromised version
- Mar 16, 2026
Malicious code in graphql-request-dom (npm)
- Mar 16, 2026
Malicious code in bignumber-tool.js (npm)
- Mar 16, 2026
Malware in graphql-request-dom
1 compromised version
- Mar 16, 2026
Malware in bignumber-tool.js
1 compromised version
- Mar 16, 2026
Malicious code in testpoc01 (npm)
- Mar 16, 2026
Malware in testpoc01
1 compromised version
- Mar 16, 2026
Malicious code in omhcsilence-bails (npm)
Page 158 of 4,807