Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,301 total in npm · sorted newest first- Mar 12, 2026
Malware in react-svg-anchor
1 compromised version
- Mar 12, 2026
Malicious code in npm-doc-build (npm)
2 compromised versions
- Mar 12, 2026
Malicious code in bign.ts (npm)
- Mar 12, 2026
Malware in npm-doc-build
1 compromised version
- Mar 12, 2026
Malware in bign.ts
1 compromised version
- Mar 12, 2026
Malicious code in b2b-common-cb-lib (npm)
2 compromised versions
- Mar 12, 2026
Malware in b2b-common-cb-lib
1 compromised version
- Mar 12, 2026
Malicious code in svg-safety-tool (npm)
- Mar 12, 2026
Malware in svg-safety-tool
1 compromised version
- Mar 12, 2026
Malicious code in restrict-imports (npm)
- Mar 12, 2026
Malicious code in jinja-template (npm)
- Mar 12, 2026
Malware in restrict-imports
1 compromised version
- Mar 12, 2026
Malware in jinja-template
1 compromised version
- Mar 11, 2026
Malicious code in f0-abstraction-resolver (npm)
2 compromised versions
- Mar 11, 2026
Malicious code in locale-clamp-middleware (npm)
1 compromised version
- Mar 11, 2026
Malicious code in mabibilabub (npm)
1 compromised version
- Mar 11, 2026
Malicious code in ts-lint-builder (npm)
- Mar 11, 2026
Malicious code in npm-builders (npm)
- Mar 11, 2026
Malicious code in bignum-ts (npm)
- Mar 11, 2026
Malware in ts-lint-builder
1 compromised version
- Mar 11, 2026
Malware in npm-builders
1 compromised version
- Mar 11, 2026
Malware in bignum-ts
1 compromised version
- Mar 11, 2026
Malicious code in chai-as-flex (npm)
2 compromised versions
- Mar 11, 2026
Malware in chai-as-flex
1 compromised version
- Mar 11, 2026
Malicious code in vite-chunker (npm)
- Mar 11, 2026
Malicious code in tailwindcss-forms-bundler (npm)
- Mar 11, 2026
Malicious code in tailwindcss-animate-framer (npm)
- Mar 11, 2026
Malicious code in polygon-gamma-api (npm)
- Mar 11, 2026
Malicious code in gamma-api-provider (npm)
- Mar 11, 2026
Malware in gamma-api-provider
1 compromised version
- Mar 11, 2026
Malware in tailwindcss-forms-bundler
1 compromised version
- Mar 11, 2026
Malware in vite-chunker
1 compromised version
- Mar 11, 2026
Malware in tailwindcss-animate-framer
1 compromised version
- Mar 11, 2026
Malware in polygon-gamma-api
1 compromised version
- Mar 11, 2026
Malicious code in mui-path-imports (npm)
1 compromised version
- Mar 11, 2026
Malware in mui-path-imports
1 compromised version
- Mar 11, 2026
Malicious code in typescript-urql (npm)
1 compromised version
- Mar 11, 2026
Malicious code in clean-order (npm)
1 compromised version
- Mar 11, 2026
Malware in clean-order
1 compromised version
- Mar 11, 2026
Malware in typescript-urql
1 compromised version
- Mar 11, 2026
Malicious code in google-camelcase (npm)
1 compromised version
- Mar 11, 2026
Malware in google-camelcase
1 compromised version
- Mar 11, 2026
Malicious code in sort-export-all (npm)
1 compromised version
- Mar 11, 2026
Malware in sort-export-all
1 compromised version
- Mar 11, 2026
Malicious code in filter-imports (npm)
1 compromised version
- Mar 11, 2026
Malware in filter-imports
1 compromised version
- Mar 11, 2026
Malicious code in import-zod (npm)
1 compromised version
- Mar 11, 2026
Malware in import-zod
1 compromised version
- Mar 11, 2026
Malicious code in llm-oracle (npm)
4 compromised versions
- Mar 11, 2026
Malware in llm-oracle
1 compromised version
Page 163 of 4,807