Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,307 total in npm · sorted newest first- Mar 2, 2026
Malicious code in vitetest-lint (npm)
- Mar 2, 2026
Malware in vitetest-lint
1 compromised version
- Mar 2, 2026
Malware in promanage
1 compromised version
- Mar 2, 2026
Malicious code in loadash-lint (npm)
- Mar 2, 2026
Malware in loadash-lint
1 compromised version
- Mar 2, 2026
Malicious code in expressjs-lint (npm)
- Mar 2, 2026
Malware in expressjs-lint
1 compromised version
- Mar 2, 2026
Malware in undicy-lint
1 compromised version
- Mar 2, 2026
Malicious code in sequelization (npm)
- Mar 2, 2026
Malware in sequelization
1 compromised version
- Mar 2, 2026
Malware in iosysredis
1 compromised version
- Mar 2, 2026
Malicious code in jsnwebapptoken (npm)
- Mar 2, 2026
Malware in jsnwebapptoken
1 compromised version
- Mar 2, 2026
Malware in corstoken
1 compromised version
- Mar 2, 2026
Malicious code in daytonjs (npm)
- Mar 2, 2026
Malware in daytonjs
1 compromised version
- Mar 2, 2026
Malware in zoddle
1 compromised version
- Mar 2, 2026
Malware in jslint-config
1 compromised version
- Mar 2, 2026
Malicious code in bee-quarl (npm)
- Mar 2, 2026
Malware in bee-quarl
1 compromised version
- Mar 2, 2026
Malware in windowston
1 compromised version
- Mar 2, 2026
Malicious code in mqttoken (npm)
- Mar 2, 2026
Malware in mqttoken
1 compromised version
- Mar 2, 2026
Malicious code in bubble-core (npm)
- Mar 2, 2026
Malware in bubble-core
1 compromised version
- Mar 2, 2026
Malicious code in formmiderable (npm)
- Mar 2, 2026
Malware in formmiderable
1 compromised version
- Mar 1, 2026
Malicious code in ng-vzbootstrap (npm)
4 compromised versions
- Mar 1, 2026
Malicious code in sketch-measure (npm)
1 compromised version
- Mar 1, 2026
Malicious code in jquery-display (npm)
2 compromised versions
- Mar 1, 2026
Malicious code in dc-web-app (npm)
1 compromised version
- Mar 1, 2026
Malicious code in naughty-package (npm)
4 compromised versions
- Feb 28, 2026
Malicious code in bps-design-system (npm)
1 compromised version
- Feb 28, 2026
Malicious code in dc-mobx (npm)
1 compromised version
- Feb 27, 2026
Malicious code in marionette-react-view (npm)
1 compromised version
- Feb 27, 2026
Malicious code in socket-dgxeon (npm)
- Feb 27, 2026
Malicious code in @dgxeon/libsignal-node (npm)
- Feb 27, 2026
Malware in socket-dgxeon
1 compromised version
- Feb 27, 2026
Malware in @dgxeon/libsignal-node
1 compromised version
- Feb 27, 2026
Malicious code in sokettry (npm)
- Feb 27, 2026
Malicious code in dgxeon-soket4 (npm)
- Feb 27, 2026
Malicious code in dgxeon-soket3 (npm)
- Feb 27, 2026
Malicious code in dgxeon-soket2 (npm)
- Feb 27, 2026
Malicious code in dgxeon-soket (npm)
10 compromised versions
- Feb 27, 2026
Malicious code in baileys-xeonbot (npm)
- Feb 27, 2026
Malware in dgxeon-soket2
1 compromised version
- Feb 27, 2026
Malware in baileys-xeonbot
1 compromised version
- Feb 27, 2026
Malware in dgxeon-soket4
1 compromised version
- Feb 27, 2026
Malware in dgxeon-soket3
1 compromised version
- Feb 27, 2026
Malware in dgxeon-soket
1 compromised version
Page 171 of 4,807