Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,307 total in npm · sorted newest first- Feb 3, 2026
Malware in braintree-web-latest
1 compromised version
- Feb 3, 2026
Malicious code in aligned-array (npm)
2 compromised versions
- Feb 3, 2026
Malware in aligned-array
1 compromised version
- Feb 3, 2026
Malicious code in typescript-react-apollo (npm)
- Feb 3, 2026
Malicious code in typed-document-node (npm)
- Feb 3, 2026
Malicious code in transform-react-display-name (npm)
- Feb 3, 2026
Malicious code in transform-exponentiation-operator (npm)
- Feb 3, 2026
Malicious code in transform-es2015-modules-amd (npm)
- Feb 3, 2026
Malicious code in transform-async-generator-functions (npm)
- Feb 3, 2026
Malware in typescript-react-apollo
1 compromised version
- Feb 3, 2026
Malware in transform-react-display-name
1 compromised version
- Feb 3, 2026
Malware in typed-document-node
1 compromised version
- Feb 3, 2026
Malware in transform-async-generator-functions
1 compromised version
- Feb 3, 2026
Malware in transform-es2015-modules-amd
1 compromised version
- Feb 3, 2026
Malware in transform-exponentiation-operator
1 compromised version
- Feb 3, 2026
Malicious code in netlify-project-helper (npm)
- Feb 3, 2026
Malicious code in dns-troubleshoot-toolkit-xyz123 (npm)
- Feb 3, 2026
Malware in dns-troubleshoot-toolkit-xyz123
1 compromised version
- Feb 3, 2026
Malware in netlify-project-helper
1 compromised version
- Feb 3, 2026
Malicious code in vite-ui-components (npm)
- Feb 3, 2026
Malicious code in ansi-universal-ui (npm)
- Feb 3, 2026
Malware in ansi-universal-ui
1 compromised version
- Feb 3, 2026
Malware in vite-ui-components
1 compromised version
- Feb 3, 2026
Malware in hemi-btc-staking-actions
1 compromised version
- Feb 3, 2026
Malicious code in atg-atgse (npm)
5 compromised versions
- Feb 3, 2026
Malware in atg-atgse
1 compromised version
- Feb 3, 2026
Malicious code in researchpoc (npm)
- Feb 3, 2026
Malware in researchpoc
1 compromised version
- Feb 3, 2026
Malicious code in react-dnd-legacy-html5-backend (npm)
- Feb 3, 2026
Malware in react-dnd-legacy-html5-backend
1 compromised version
- Feb 3, 2026
Malware in pap-client
1 compromised version
- Feb 3, 2026
Malicious code in jshint-groups (npm)
- Feb 3, 2026
Malware in roots-cms-client
1 compromised version
- Feb 3, 2026
Malware in something-not-in-cache
1 compromised version
- Feb 3, 2026
Malware in jshint-groups
1 compromised version
- Feb 3, 2026
Malware in launchdarkly-cpp-networking
1 compromised version
- Feb 2, 2026
Malicious code in picking-miniapp (npm)
- Feb 2, 2026
Malware in picking-miniapp
1 compromised version
- Feb 2, 2026
Malicious code in react-native-expofp (npm)
- Feb 2, 2026
Malware in react-native-expofp
1 compromised version
- Feb 2, 2026
Malicious code in dise-pkt (npm)
2 compromised versions
- Feb 2, 2026
Malware in dise-pkt
1 compromised version
- Feb 2, 2026
Malicious code in @hemanshu_patil/xcode-windows-x64 (npm)
- Feb 2, 2026
Malicious code in @hemanshu_patil/xcode (npm)
- Feb 2, 2026
Malware in @hemanshu_patil/xcode-windows-x64
1 compromised version
- Feb 2, 2026
Malware in @hemanshu_patil/xcode
1 compromised version
- Feb 2, 2026
Malicious code in yazxzpedia (npm)
- Feb 2, 2026
Malicious code in libsignal-yazxzpedia (npm)
- Feb 2, 2026
Malware in libsignal-yazxzpedia
1 compromised version
- Feb 2, 2026
Malware in yazxzpedia
1 compromised version
Page 182 of 4,807