Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,301 total in npm · sorted newest first- Mar 10, 2026
Malicious code in test-logsmodule-v-zisko (npm)
- Mar 10, 2026
Malicious code in bluelite-bot-manager (npm)
- Mar 10, 2026
Malware in bluelite-bot-manager
1 compromised version
- Mar 10, 2026
Malware in test-logsmodule-v-zisko
1 compromised version
- Mar 10, 2026
Malicious code in rtxnode-sass22 (npm)
- Mar 10, 2026
Malware in uxproject11
1 compromised version
- Mar 10, 2026
Malware in projectrtert
1 compromised version
- Mar 10, 2026
Malware in rtxnode-sass22
1 compromised version
- Mar 10, 2026
Malware in rtxbbtyols
1 compromised version
- Mar 10, 2026
Malicious code in @openclaw-ai/openclawai (npm)
- Mar 10, 2026
Malware in @openclaw-ai/openclawai
1 compromised version
- Mar 10, 2026
Malicious code in @web-monorepo/fetchers (npm)
- Mar 10, 2026
Malicious code in @augmentor/experiences (npm)
- Mar 10, 2026
Malicious code in alinet-w (npm)
- Mar 10, 2026
Malicious code in chain-promised-await (npm)
2 compromised versions
- Mar 10, 2026
Malicious code in iron-signals (npm)
- Mar 10, 2026
Malicious code in iron-selector (npm)
- Mar 10, 2026
Malicious code in iron-pages (npm)
- Mar 10, 2026
Malicious code in iron-overlay-behavior (npm)
- Mar 10, 2026
Malicious code in iron-menu-behavior (npm)
- Mar 10, 2026
Malicious code in iron-localstorage (npm)
- Mar 10, 2026
Malicious code in iron-fit-behavior (npm)
- Mar 10, 2026
Malicious code in falcologgerinternalstate (npm)
- Mar 10, 2026
Malicious code in collab-library (npm)
- Mar 10, 2026
Malicious code in amt-package-united-icons (npm)
- Mar 10, 2026
Malicious code in @rothaus/falcologgerinternalstate (npm)
- Mar 10, 2026
Malicious code in @platform-growth/guidance-channel-provider (npm)
1 compromised version
- Mar 10, 2026
Malicious code in @mmm-otrade/transaction-adapter (npm)
- Mar 10, 2026
Malicious code in @mmm-otrade/transaction (npm)
- Mar 10, 2026
Malware in amt-package-united-icons
1 compromised version
- Mar 10, 2026
Malware in iron-signals
1 compromised version
- Mar 10, 2026
Malware in @mmm-otrade/transaction
1 compromised version
- Mar 10, 2026
Malware in @platform-growth/guidance-channel-provider
1 compromised version
- Mar 10, 2026
Malware in falcologgerinternalstate
1 compromised version
- Mar 10, 2026
Malware in iron-pages
1 compromised version
- Mar 10, 2026
Malware in iron-menu-behavior
1 compromised version
- Mar 10, 2026
Malware in iron-fit-behavior
1 compromised version
- Mar 10, 2026
Malware in iron-overlay-behavior
1 compromised version
- Mar 10, 2026
Malware in iron-selector
1 compromised version
- Mar 10, 2026
Malware in iron-localstorage
1 compromised version
- Mar 10, 2026
Malware in @rothaus/falcologgerinternalstate
1 compromised version
- Mar 10, 2026
Malware in collab-library
1 compromised version
- Mar 10, 2026
Malware in @mmm-otrade/transaction-adapter
1 compromised version
- Mar 10, 2026
Malicious code in xc-input-toggle (npm)
- Mar 10, 2026
Malicious code in iron-media-query (npm)
- Mar 10, 2026
Malicious code in iron-image (npm)
- Mar 10, 2026
Malware in iron-media-query
1 compromised version
- Mar 10, 2026
Malware in xc-input-toggle
1 compromised version
- Mar 10, 2026
Malware in iron-image
1 compromised version
- Mar 10, 2026
Malicious code in monoping (npm)
Page 164 of 4,807