Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,307 total in npm · sorted newest first- Feb 3, 2026
Malware in fileupload-util
1 compromised version
- Feb 3, 2026
Malicious code in tailwindcss-forms-kit (npm)
- Feb 3, 2026
Malware in tailwindcss-forms-kit
1 compromised version
- Feb 3, 2026
Malicious code in tsconfig-stitch (npm)
- Feb 3, 2026
Malicious code in fingerprint-stitch (npm)
- Feb 3, 2026
Malicious code in eslint-config-stitch (npm)
- Feb 3, 2026
Malicious code in eslint-config-nlx (npm)
- Feb 3, 2026
Malware in eslint-config-minecraft-scripting
1 compromised version
- Feb 3, 2026
Malware in epic-asset-uploader
1 compromised version
- Feb 3, 2026
Malware in tsconfig-stitch
1 compromised version
- Feb 3, 2026
Malware in solhint-plugin-hyperlane
1 compromised version
- Feb 3, 2026
Malware in eslint-config-stitch
1 compromised version
- Feb 3, 2026
Malware in fingerprint-stitch
1 compromised version
- Feb 3, 2026
Malware in eslint-config-nlx
1 compromised version
- Feb 3, 2026
Malicious code in graphrix (npm)
1 compromised version
- Feb 3, 2026
Malware in graphrix
1 compromised version
- Feb 3, 2026
Malicious code in tarax (npm)
- Feb 3, 2026
Malware in tarax
1 compromised version
- Feb 3, 2026
Malicious code in @uselagoon/ui-library (npm)
- Feb 3, 2026
Malware in @uselagoon/ui-library
1 compromised version
- Feb 3, 2026
Malicious code in internallib_v782 (npm)
- Feb 3, 2026
Malware in internallib_v782
1 compromised version
- Feb 3, 2026
Malicious code in strengthifys (npm)
- Feb 3, 2026
Malicious code in react-responsive-carousel-v4 (npm)
- Feb 3, 2026
Malicious code in frontend-js-state-web (npm)
3 compromised versions
- Feb 3, 2026
Malicious code in epic-admin-ui (npm)
- Feb 3, 2026
Malware in frontend-js-state-web
1 compromised version
- Feb 3, 2026
Malware in react-responsive-carousel-v4
1 compromised version
- Feb 3, 2026
Malware in strengthifys
1 compromised version
- Feb 3, 2026
Malware in epic-admin-ui
1 compromised version
- Feb 3, 2026
Malicious code in l2-contracts (npm)
- Feb 3, 2026
Malware in l2-contracts
1 compromised version
- Feb 3, 2026
Malicious code in kwp-analytics (npm)
- Feb 3, 2026
Malware in kwp-analytics
1 compromised version
- Feb 3, 2026
Malicious code in chai-promise-tools (npm)
1 compromised version
- Feb 3, 2026
Malware in chai-promise-tools
1 compromised version
- Feb 3, 2026
Malicious code in cookie-parsers-env (npm)
1 compromised version
- Feb 3, 2026
Malware in cookie-parsers-env
1 compromised version
- Feb 3, 2026
Malicious code in @ikeacnalan/icons (npm)
1 compromised version
- Feb 3, 2026
Malware in @ikeacnalan/icons
1 compromised version
- Feb 3, 2026
Malicious code in freedom-baileys (npm)
- Feb 3, 2026
Malicious code in baileys-ud (npm)
- Feb 3, 2026
Malware in baileys-ud
1 compromised version
- Feb 3, 2026
Malware in freedom-baileys
1 compromised version
- Feb 3, 2026
Malicious code in supun-baileys (npm)
- Feb 3, 2026
Malicious code in baileys-dtz (npm)
- Feb 3, 2026
Malware in baileys-dtz
1 compromised version
- Feb 3, 2026
Malware in supun-baileys
1 compromised version
- Feb 3, 2026
Malicious code in cheerio-core (npm)
- Feb 3, 2026
Malware in cheerio-core
1 compromised version
Page 181 of 4,807