Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,301 total in npm · sorted newest first- Mar 13, 2026
Malware in fusion-internal-common-drzak
1 compromised version
- Mar 13, 2026
Malware in tradepmr-fusion-core-drzak
1 compromised version
- Mar 13, 2026
Malware in dell-internal-auth-drzak
1 compromised version
- Mar 13, 2026
Malicious code in @immuta/flag-providers-web (npm)
- Mar 13, 2026
Malicious code in tachyon-spade-reporter (npm)
- Mar 13, 2026
Malicious code in tahoe-tap (npm)
- Mar 13, 2026
Malicious code in tourney-sdk-react (npm)
- Mar 13, 2026
Malicious code in twitch-twilight-intl (npm)
- Mar 13, 2026
Malicious code in conductor-managed-airflow-environment (npm)
- Mar 13, 2026
Malicious code in @lux2/ssr-catalogue-sfcc (npm)
- Mar 13, 2026
Malicious code in @immuta/feature-flags-core (npm)
- Mar 13, 2026
Malicious code in @immuta/pxl-components (npm)
- Mar 13, 2026
Malicious code in 8x8-developer-docs (npm)
1 compromised version
- Mar 13, 2026
Malware in 8x8-developer-docs
1 compromised version
- Mar 13, 2026
Malicious code in f0-service-address-doctor (npm)
4 compromised versions
- Mar 13, 2026
Malicious code in adroit-websdk-server (npm)
1 compromised version
- Mar 12, 2026
Malicious code in cline (npm)
1 compromised version
- Mar 12, 2026
Malicious code in spectral-corsair-my-backdoor (npm)
1 compromised version
- Mar 12, 2026
Malicious code in @sky-it-livedata-libraries/livedata-commons-client (npm)
- Mar 12, 2026
Malware in @sky-it-livedata-libraries/livedata-commons-client
1 compromised version
- Mar 12, 2026
Malicious code in @sky-it-livedata-libraries/livedata-commons (npm)
- Mar 12, 2026
Malware in @sky-it-livedata-libraries/livedata-commons
1 compromised version
- Mar 12, 2026
Malware in webmd-url
1 compromised version
- Mar 12, 2026
Malicious code in @adamallana0909/apple-research-test (npm)
2 compromised versions
- Mar 12, 2026
Malicious code in @appleseed-apple/ac-sasskit (npm)
1 compromised version
- Mar 12, 2026
Malicious code in json-specparse (npm)
3 compromised versions
- Mar 12, 2026
Malware in json-specparse
1 compromised version
- Mar 12, 2026
Malicious code in mezukabil (npm)
- Mar 12, 2026
Malware in mezukabil
1 compromised version
- Mar 12, 2026
Malicious code in kinggupong (npm)
- Mar 12, 2026
Malicious code in @kinggupong/libsignal-node (npm)
- Mar 12, 2026
Malicious code in @kinggupong/baileys (npm)
- Mar 12, 2026
Malware in @kinggupong/libsignal-node
1 compromised version
- Mar 12, 2026
Malware in kinggupong
1 compromised version
- Mar 12, 2026
Malware in @kinggupong/baileys
1 compromised version
- Mar 12, 2026
Malicious code in unibody (npm)
1 compromised version
- Mar 12, 2026
Malicious code in praxis-scripts (npm)
1 compromised version
- Mar 12, 2026
Malicious code in pcl-build-docroot (npm)
1 compromised version
- Mar 12, 2026
Malware in unibody
1 compromised version
- Mar 12, 2026
Malware in pcl-build-docroot
1 compromised version
- Mar 12, 2026
Malware in praxis-scripts
1 compromised version
- Mar 12, 2026
Malicious code in libsignal-mod (npm)
- Mar 12, 2026
Malicious code in dappa-libsignal (npm)
- Mar 12, 2026
Malware in dappa-libsignal
1 compromised version
- Mar 12, 2026
Malware in libsignal-mod
1 compromised version
- Mar 12, 2026
Malicious code in @dappaoffc/baileys-mod (npm)
- Mar 12, 2026
Malicious code in @dappaoffc/baileys (npm)
- Mar 12, 2026
Malware in @dappaoffc/baileys
1 compromised version
- Mar 12, 2026
Malware in @dappaoffc/baileys-mod
1 compromised version
- Mar 12, 2026
Malicious code in react-svg-anchor (npm)
Page 162 of 4,807