Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,307 total in npm · sorted newest first- Mar 3, 2026
Malicious code in graph-dynamic (npm)
2 compromised versions
- Mar 3, 2026
Malware in graph-dynamic
1 compromised version
- Mar 3, 2026
Malicious code in magala (npm)
- Mar 3, 2026
Malware in magala
1 compromised version
- Mar 3, 2026
Malicious code in openclaw-droid (npm)
- Mar 3, 2026
Malware in openclaw-droid
1 compromised version
- Mar 3, 2026
Malicious code in token-discord-encryptation (npm)
- Mar 3, 2026
Malware in token-discord-encryptation
1 compromised version
- Mar 3, 2026
Malicious code in solongnerds (npm)
- Mar 3, 2026
Malware in solongnerds
1 compromised version
- Mar 3, 2026
Malicious code in yazxzpedia-libsignal (npm)
- Mar 3, 2026
Malicious code in rullzdigital-libsignal (npm)
- Mar 3, 2026
Malicious code in rullzdigital (npm)
- Mar 3, 2026
Malicious code in primexuu-libsignal (npm)
- Mar 3, 2026
Malicious code in libsignal-yazxz (npm)
- Mar 3, 2026
Malicious code in danzxoffc74-libsignal (npm)
- Mar 3, 2026
Malicious code in danzxoffc74 (npm)
- Mar 3, 2026
Malicious code in @yazxzpedia/baileys (npm)
- Mar 3, 2026
Malware in danzxoffc74
1 compromised version
- Mar 3, 2026
Malware in rullzdigital
1 compromised version
- Mar 3, 2026
Malware in @yazxzpedia/baileys
1 compromised version
- Mar 3, 2026
Malware in danzxoffc74-libsignal
1 compromised version
- Mar 3, 2026
Malware in rullzdigital-libsignal
1 compromised version
- Mar 3, 2026
Malware in libsignal-yazxz
1 compromised version
- Mar 3, 2026
Malware in primexuu-libsignal
1 compromised version
- Mar 3, 2026
Malware in yazxzpedia-libsignal
1 compromised version
- Mar 3, 2026
Malicious code in xpack-video-submission (npm)
11 compromised versions
- Mar 3, 2026
Malicious code in xpack-test-3.0 (npm)
- Mar 3, 2026
Malicious code in xpack-arc-gateway (npm)
3 compromised versions
- Mar 3, 2026
Malicious code in ethglobal-finale (npm)
- Mar 3, 2026
Malware in ethglobal-finale
1 compromised version
- Mar 3, 2026
Malware in xpack-arc-gateway
1 compromised version
- Mar 3, 2026
Malware in xpack-test-3.0
1 compromised version
- Mar 3, 2026
Malware in xpack-video-submission
1 compromised version
- Mar 3, 2026
Malicious code in xpack-sui (npm)
3 compromised versions
- Mar 3, 2026
Malicious code in xpack-subscription (npm)
3 compromised versions
- Mar 3, 2026
Malicious code in xpack-per-device (npm)
3 compromised versions
- Mar 3, 2026
Malware in xpack-per-user
1 compromised version
- Mar 3, 2026
Malware in testing-package-xdsfdsfsc
1 compromised version
- Mar 3, 2026
Malware in xpack-subscription-test
1 compromised version
- Mar 3, 2026
Malware in xpack-sui
1 compromised version
- Mar 3, 2026
Malware in xpack-subscription
1 compromised version
- Mar 3, 2026
Malware in xpack-per-device
1 compromised version
- Mar 3, 2026
Malware in test-npm-style
1 compromised version
- Mar 3, 2026
Malicious code in pool-check (npm)
- Mar 3, 2026
Malware in pool-check
1 compromised version
- Mar 3, 2026
Malicious code in hackpreinstall (npm)
1 compromised version
- Mar 3, 2026
Malware in hackpreinstall
1 compromised version
- Mar 2, 2026
Malicious code in colorize-console (npm)
- Mar 2, 2026
Malicious code in @nazi-team/libsignal-node (npm)
Page 169 of 4,807