Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,301 total in npm · sorted newest first- Mar 13, 2026
Malicious code in cw-isdk (npm)
16 compromised versions
- Mar 13, 2026
Malicious code in tailwind-mainanimation (npm)
- Mar 13, 2026
Malware in tailwind-mainanimation
1 compromised version
- Mar 13, 2026
Malicious code in tailwindcss-style-modify (npm)
- Mar 13, 2026
Malware in tailwindcss-style-modify
1 compromised version
- Mar 13, 2026
Malicious code in twitch.dashboard-v2.core (npm)
- Mar 13, 2026
Malicious code in twitch-security (npm)
- Mar 13, 2026
Malicious code in pulsard-utils (npm)
- Mar 13, 2026
Malicious code in hardhat2-config (npm)
- Mar 13, 2026
Malware in twitch-twilight-intl
1 compromised version
- Mar 13, 2026
Malware in twitch-security
1 compromised version
- Mar 13, 2026
Malware in conductor-managed-airflow-environment
1 compromised version
- Mar 13, 2026
Malware in pulsard-utils
1 compromised version
- Mar 13, 2026
Malware in twitch.dashboard-v2.core
1 compromised version
- Mar 13, 2026
Malware in tourney-sdk-react
1 compromised version
- Mar 13, 2026
Malware in tahoe-tap
1 compromised version
- Mar 13, 2026
Malware in tachyon-spade-reporter
1 compromised version
- Mar 13, 2026
Malware in hardhat2-config
1 compromised version
- Mar 13, 2026
Malicious code in brlc-base (npm)
- Mar 13, 2026
Malware in brlc-base
1 compromised version
- Mar 13, 2026
Malicious code in rrweb-v1 (npm)
1 compromised version
- Mar 13, 2026
Malicious code in solana-pumpfun-sdk (npm)
- Mar 13, 2026
Malicious code in pino-sdk (npm)
3 compromised versions
- Mar 13, 2026
Malware in pino-sdk
1 compromised version
- Mar 13, 2026
Malware in solana-pumpfun-sdk
1 compromised version
- Mar 13, 2026
Malicious code in @dinzid04/libsignal-node (npm)
- Mar 13, 2026
Malicious code in @dinzid04/baileys (npm)
- Mar 13, 2026
Malware in @dinzid04/baileys
1 compromised version
- Mar 13, 2026
Malware in @dinzid04/libsignal-node
1 compromised version
- Mar 13, 2026
Malicious code in tailwindcss-animation-advanced (npm)
- Mar 13, 2026
Malware in tailwindcss-animation-advanced
1 compromised version
- Mar 13, 2026
Malicious code in cortana-md-bot (npm)
- Mar 13, 2026
Malicious code in @depro-tech/cortana-md (npm)
- Mar 13, 2026
Malware in @depro-tech/cortana-md
1 compromised version
- Mar 13, 2026
Malware in cortana-md-bot
1 compromised version
- Mar 13, 2026
Malicious code in whatsapp-core-auth-drzak (npm)
1 compromised version
- Mar 13, 2026
Malicious code in meta-internal-logger-drzak (npm)
2 compromised versions
- Mar 13, 2026
Malware in whatsapp-core-auth-drzak
1 compromised version
- Mar 13, 2026
Malware in meta-internal-logger-drzak
1 compromised version
- Mar 13, 2026
Malicious code in whatsapp-fastdesk-utils-drzak (npm)
1 compromised version
- Mar 13, 2026
Malicious code in tradepmr-fusion-core-drzak (npm)
1 compromised version
- Mar 13, 2026
Malicious code in tradepmr-api-utils-drzak (npm)
1 compromised version
- Mar 13, 2026
Malicious code in fusion-internal-common-drzak (npm)
1 compromised version
- Mar 13, 2026
Malicious code in dell-internal-auth-drzak (npm)
1 compromised version
- Mar 13, 2026
Malicious code in dell-fusion-core-drzak (npm)
1 compromised version
- Mar 13, 2026
Malicious code in dell-emc-internal-api-drzak (npm)
1 compromised version
- Mar 13, 2026
Malware in whatsapp-fastdesk-utils-drzak
1 compromised version
- Mar 13, 2026
Malware in dell-emc-internal-api-drzak
1 compromised version
- Mar 13, 2026
Malware in dell-fusion-core-drzak
1 compromised version
- Mar 13, 2026
Malware in tradepmr-api-utils-drzak
1 compromised version
Page 161 of 4,807