Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,307 total in npm · sorted newest first- Feb 6, 2026
Malware in @rsgweb/tina
1 compromised version
- Feb 6, 2026
Malware in @rsgweb/locale-tools
1 compromised version
- Feb 6, 2026
Malware in @rsgweb/utils
1 compromised version
- Feb 6, 2026
Malicious code in @opposhop/nuxt-ssr-cache (npm)
- Feb 6, 2026
Malicious code in @meli-lint/eslint-config-base (npm)
- Feb 6, 2026
Malware in @opposhop/nuxt-ssr-cache
1 compromised version
- Feb 6, 2026
Malware in @meli-lint/eslint-config-base
1 compromised version
- Feb 6, 2026
Malicious code in @meli-lint/eslint-config-tests-jest (npm)
- Feb 6, 2026
Malicious code in @meli-lint/eslint-config-base-ts (npm)
- Feb 6, 2026
Malicious code in @hashicorp-internal/vault-reporting (npm)
- Feb 6, 2026
Malware in @meli-lint/eslint-config-tests-jest
1 compromised version
- Feb 6, 2026
Malware in @hashicorp-internal/vault-reporting
1 compromised version
- Feb 6, 2026
Malware in @meli-lint/eslint-config-base-ts
1 compromised version
- Feb 6, 2026
Malware in syf-api
1 compromised version
- Feb 6, 2026
Malicious code in syf-typings (npm)
1 compromised version
- Feb 6, 2026
Malware in syf-typings
1 compromised version
- Feb 6, 2026
Malware in syf-api-legacy
1 compromised version
- Feb 6, 2026
Malicious code in @sporting-life/sportinglife-be (npm)
1 compromised version
- Feb 6, 2026
Malicious code in @sporting-life/sportinglife-betslip-sdk (npm)
1 compromised version
- Feb 6, 2026
Malicious code in @rsgweb/locale-tools (npm)
1 compromised version
- Feb 6, 2026
Malicious code in ppe-test (npm)
2 compromised versions
- Feb 6, 2026
Malicious code in monkey-tags (npm)
8 compromised versions
- Feb 6, 2026
Malicious code in adobe_pipeline_test (npm)
1 compromised version
- Feb 6, 2026
Malicious code in ac-polyfills (npm)
1 compromised version
- Feb 6, 2026
Malicious code in ac-feature (npm)
1 compromised version
- Feb 6, 2026
Malicious code in ac-element-engagement (npm)
2 compromised versions
- Feb 6, 2026
Malicious code in ac-dom-styles (npm)
1 compromised version
- Feb 6, 2026
Malicious code in ac-dom-nodes (npm)
3 compromised versions
- Feb 6, 2026
Malicious code in ac-dom-events (npm)
1 compromised version
- Feb 6, 2026
Malicious code in ac-checksum (npm)
1 compromised version
- Feb 6, 2026
Malicious code in ac-array (npm)
1 compromised version
- Feb 5, 2026
Malicious code in ethers-lint (npm)
1 compromised version
- Feb 5, 2026
Malicious code in test-npm-style (npm)
7 compromised versions
- Feb 5, 2026
Malicious code in xpack-per-user (npm)
1 compromised version
- Feb 5, 2026
Malicious code in debug-logger-utils (npm)
- Feb 5, 2026
Malware in debug-logger-utils
1 compromised version
- Feb 5, 2026
Malicious code in 0xhash-utils (npm)
- Feb 5, 2026
Malware in 0xhash-utils
1 compromised version
- Feb 5, 2026
Malicious code in https-servers (npm)
- Feb 5, 2026
Malware in https-servers
1 compromised version
- Feb 5, 2026
Malicious code in optimizer-cpu (npm)
- Feb 5, 2026
Malware in optimizer-cpu
1 compromised version
- Feb 5, 2026
Malicious code in chai-as-advanced (npm)
3 compromised versions
- Feb 5, 2026
Malware in chai-as-advanced
1 compromised version
- Feb 5, 2026
Malicious code in digital-checkout (npm)
1 compromised version
- Feb 5, 2026
Malicious code in @helloflex/widget-next-sdk (npm)
4 compromised versions
- Feb 5, 2026
Malware in @helloflex/widget-next-sdk
1 compromised version
- Feb 5, 2026
Malicious code in conp-dats-editor (npm)
4 compromised versions
- Feb 5, 2026
Malicious code in internallib_v157 (npm)
- Feb 5, 2026
Malware in internallib_v157
1 compromised version
Page 178 of 4,807