Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,307 total in npm · sorted newest first- Mar 3, 2026
Malicious code in fps-logger (npm)
1 compromised version
- Mar 3, 2026
Malicious code in @twilio-client/twilio-client (npm)
2 compromised versions
- Mar 3, 2026
Malicious code in @bookings.microsoft.com/s (npm)
- Mar 3, 2026
Malware in @twilio-client/twilio-client
1 compromised version
- Mar 3, 2026
Malware in @bookings.microsoft.com/s
1 compromised version
- Mar 3, 2026
Malware in fps-logger
1 compromised version
- Mar 3, 2026
Malicious code in rbxm-utils (npm)
- Mar 3, 2026
Malware in rbxm-utils
1 compromised version
- Mar 3, 2026
Malicious code in web-prompt (npm)
- Mar 3, 2026
Malware in web-prompt
1 compromised version
- Mar 3, 2026
Malware in ethereum-lint
1 compromised version
- Mar 3, 2026
Malware in ethereums-lint
1 compromised version
- Mar 3, 2026
Malicious code in bigmathutils-v2 (npm)
- Mar 3, 2026
Malware in bigmathutils-v2
1 compromised version
- Mar 3, 2026
Malware in realestate-ask
1 compromised version
- Mar 3, 2026
Malware in vds-monarch
1 compromised version
- Mar 3, 2026
Malware in ng-vzbootstrap
1 compromised version
- Mar 3, 2026
Malicious code in webnochs (npm)
- Mar 3, 2026
Malicious code in webnoch (npm)
- Mar 3, 2026
Malicious code in ethersnog (npm)
- Mar 3, 2026
Malicious code in ethersnode (npm)
2 compromised versions
- Mar 3, 2026
Malware in ethersnog
1 compromised version
- Mar 3, 2026
Malware in webnoch
1 compromised version
- Mar 3, 2026
Malware in ethersnode
1 compromised version
- Mar 3, 2026
Malware in webnochs
1 compromised version
- Mar 3, 2026
Malicious code in eslint-verify-plugin (npm)
- Mar 3, 2026
Malware in eslint-verify-plugin
1 compromised version
- Mar 3, 2026
Malicious code in gabby-types (npm)
- Mar 3, 2026
Malware in gabby-types
1 compromised version
- Mar 3, 2026
Malware in compass-e2e-tests
1 compromised version
- Mar 3, 2026
Malware in hops-preset-jest
1 compromised version
- Mar 3, 2026
Malware in fhir.base.template
1 compromised version
- Mar 3, 2026
Malicious code in @global-dax-ad-platform/dax-utils (npm)
3 compromised versions
- Mar 3, 2026
Malicious code in @global-dax-ad-platform/dax-types (npm)
3 compromised versions
- Mar 3, 2026
Malicious code in @global-dax-ad-platform/dax-styles (npm)
3 compromised versions
- Mar 3, 2026
Malicious code in @global-dax-ad-platform/dax-modules (npm)
3 compromised versions
- Mar 3, 2026
Malicious code in @global-dax-ad-platform/dax-hooks (npm)
3 compromised versions
- Mar 3, 2026
Malicious code in @global-dax-ad-platform/dax-components (npm)
3 compromised versions
- Mar 3, 2026
Malware in @global-dax-ad-platform/dax-styles
1 compromised version
- Mar 3, 2026
Malware in @global-dax-ad-platform/dax-types
1 compromised version
- Mar 3, 2026
Malware in @global-dax-ad-platform/dax-hooks
1 compromised version
- Mar 3, 2026
Malware in @global-dax-ad-platform/dax-modules
1 compromised version
- Mar 3, 2026
Malware in @global-dax-ad-platform/dax-components
1 compromised version
- Mar 3, 2026
Malware in @global-dax-ad-platform/dax-utils
1 compromised version
- Mar 3, 2026
Malicious code in hiagentevilmcp (npm)
- Mar 3, 2026
Malware in hiagentevilmcp
1 compromised version
- Mar 3, 2026
Malicious code in @zakhaevv/envai (npm)
- Mar 3, 2026
Malware in @zakhaevv/envai
1 compromised version
- Mar 3, 2026
Malicious code in @snazaah/davey (npm)
- Mar 3, 2026
Malware in @snazaah/davey
1 compromised version
Page 168 of 4,807