Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,301 total in npm · sorted newest first- Mar 5, 2026
Malware in pearpass-lib-data-export
1 compromised version
- Mar 5, 2026
Malicious code in pear-apps-lib-feedback (npm)
- Mar 5, 2026
Malware in pear-apps-lib-feedback
1 compromised version
- Mar 5, 2026
Malicious code in pearpass-lib-data-import (npm)
- Mar 5, 2026
Malware in pearpass-lib-data-import
1 compromised version
- Mar 5, 2026
Malicious code in pearpass-utils-password-check (npm)
- Mar 5, 2026
Malware in pearpass-utils-password-check
1 compromised version
- Mar 5, 2026
Malware in nf-referral-backend
1 compromised version
- Mar 5, 2026
Malicious code in nf-referral-backend-placeholder (npm)
- Mar 5, 2026
Malware in nf-referral-backend-placeholder
1 compromised version
- Mar 5, 2026
Malicious code in spectral-corsair-navigator (npm)
1 compromised version
- Mar 5, 2026
Malicious code in nf-referral-backend (npm)
3 compromised versions
- Mar 4, 2026
Malicious code in yaml-manifest-utils-mynarratorai (npm)
1 compromised version
- Mar 4, 2026
Malicious code in pearpass-lib-vault (npm)
- Mar 4, 2026
Malware in pearpass-lib-vault
1 compromised version
- Mar 4, 2026
Malicious code in pearpass-lib-vault-core (npm)
- Mar 4, 2026
Malware in pearpass-lib-vault-core
1 compromised version
- Mar 4, 2026
Malicious code in pearpass-lib-ui-theme-provider (npm)
- Mar 4, 2026
Malware in pearpass-lib-ui-theme-provider
1 compromised version
- Mar 4, 2026
Malicious code in @get-wrecked/overlay (npm)
1 compromised version
- Mar 4, 2026
Malicious code in @molb-prelogin/gobiz-config (npm)
1 compromised version
- Mar 3, 2026
Malware in launch-darkly-js
1 compromised version
- Mar 3, 2026
Malicious code in corp-build-utils-poc (npm)
18 compromised versions
- Mar 3, 2026
Malware in corp-build-utils-poc
1 compromised version
- Mar 3, 2026
Malicious code in xrpl-dev-portal (npm)
- Mar 3, 2026
Malware in xrpl-dev-portal
1 compromised version
- Mar 3, 2026
Malicious code in demo-pipelinetest (npm)
- Mar 3, 2026
Malware in dc-mobx
1 compromised version
- Mar 3, 2026
Malware in demo-pipelinetest
1 compromised version
- Mar 3, 2026
Malware in marionette-react-view
1 compromised version
- Mar 3, 2026
Malicious code in @vk-cloud-billing/common (npm)
- Mar 3, 2026
Malware in @vk-cloud-billing/common
1 compromised version
- Mar 3, 2026
Malicious code in chai-as-confirmed (npm)
- Mar 3, 2026
Malware in chai-as-confirmed
1 compromised version
- Mar 3, 2026
Malicious code in gaia-marionette (npm)
1 compromised version
- Mar 3, 2026
Malicious code in pdfjs-dist-v5 (npm)
1 compromised version
- Mar 3, 2026
Malicious code in whop-sdk (npm)
- Mar 3, 2026
Malicious code in polymarket-trade-bot-api (npm)
- Mar 3, 2026
Malicious code in polmarket (npm)
- Mar 3, 2026
Malware in whop-sdk
1 compromised version
- Mar 3, 2026
Malware in polmarket
1 compromised version
- Mar 3, 2026
Malware in polymarket-trade-bot-api
1 compromised version
- Mar 3, 2026
Malicious code in chai-as-proofed (npm)
3 compromised versions
- Mar 3, 2026
Malware in chai-as-proofed
1 compromised version
- Mar 3, 2026
Malicious code in chai-as-mock (npm)
2 compromised versions
- Mar 3, 2026
Malware in chai-as-mock
1 compromised version
- Mar 3, 2026
Malicious code in cmc-client (npm)
- Mar 3, 2026
Malware in cmc-client
1 compromised version
- Mar 3, 2026
Malicious code in polymarket-provider (npm)
- Mar 3, 2026
Malware in polymarket-provider
1 compromised version
Page 166 of 4,807