Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,307 total in npm · sorted newest first- Feb 20, 2026
Malicious code in crypto-reader-info (npm)
- Feb 20, 2026
Malware in node-native-bridge
1 compromised version
- Feb 20, 2026
Malware in secp256
1 compromised version
- Feb 20, 2026
Malware in crypto-reader-info
1 compromised version
- Feb 20, 2026
Malware in format-defaults
1 compromised version
- Feb 20, 2026
Malware in hardhta
1 compromised version
- Feb 20, 2026
Malware in rimarf
1 compromised version
- Feb 20, 2026
Malicious code in suport-color (npm)
- Feb 20, 2026
Malicious code in opencraw (npm)
- Feb 20, 2026
Malicious code in iruchache (npm)
- Feb 20, 2026
Malicious code in iru-caches (npm)
- Feb 20, 2026
Malicious code in cloude-code (npm)
- Feb 20, 2026
Malicious code in cloude (npm)
- Feb 20, 2026
Malicious code in claud-code (npm)
- Feb 20, 2026
Malware in claud-code
1 compromised version
- Feb 20, 2026
Malware in iruchache
1 compromised version
- Feb 20, 2026
Malware in cloude
1 compromised version
- Feb 20, 2026
Malware in iru-caches
1 compromised version
- Feb 20, 2026
Malware in cloude-code
1 compromised version
- Feb 20, 2026
Malware in opencraw
1 compromised version
- Feb 20, 2026
Malware in suport-color
1 compromised version
- Feb 19, 2026
Unauthorized npm publish of cline@2.3.0 with modified postinstall script
1 compromised version
- Feb 19, 2026
Malicious code in ably-forks (npm)
1 compromised version
- Feb 18, 2026
Malicious code in ui5-cap-event-app-server (npm)
1 compromised version
- Feb 18, 2026
Malicious code in abcxyzz (npm)
1 compromised version
- Feb 17, 2026
Malicious code in vds-monarch (npm)
1 compromised version
- Feb 17, 2026
Malicious code in realestate-ask (npm)
1 compromised version
- Feb 16, 2026
Malicious code in compass-e2e-tests (npm)
1 compromised version
- Feb 16, 2026
Malicious code in ambar-src (npm)
- Feb 16, 2026
Malware in ambar-src
1 compromised version
- Feb 16, 2026
Malicious code in mds-webcomponents (npm)
2 compromised versions
- Feb 16, 2026
Malicious code in webpack-vite (npm)
- Feb 16, 2026
Malware in webpack-vite
1 compromised version
- Feb 16, 2026
Malicious code in @qualys/react-web (npm)
1 compromised version
- Feb 15, 2026
Malicious code in ethereums-lint (npm)
1 compromised version
- Feb 15, 2026
Malicious code in ethereum-lint (npm)
1 compromised version
- Feb 15, 2026
Malicious code in hops-preset-jest (npm)
1 compromised version
- Feb 13, 2026
Malicious code in sinon-web3-chain (npm)
1 compromised version
- Feb 13, 2026
Malware in sinon-web3-chain
1 compromised version
- Feb 13, 2026
Malicious code in json-mapping-src (npm)
- Feb 13, 2026
Malware in json-mapping-src
1 compromised version
- Feb 13, 2026
Malware in envoy1
1 compromised version
- Feb 13, 2026
Malicious code in responsible-ai (npm)
- Feb 13, 2026
Malicious code in contosoapp (npm)
- Feb 13, 2026
Malicious code in codexworld (npm)
- Feb 13, 2026
Malware in codexworld
1 compromised version
- Feb 13, 2026
Malware in responsible-ai
1 compromised version
- Feb 13, 2026
Malware in contosoapp
1 compromised version
- Feb 13, 2026
Malicious code in responses-starter-app (npm)
- Feb 13, 2026
Malicious code in pyright-root (npm)
Page 175 of 4,807