Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,307 total in npm · sorted newest first- Jan 27, 2026
Malicious code in hiagentxhjrce (npm)
- Jan 27, 2026
Malware in hiagentxhjrce
1 compromised version
- Jan 27, 2026
Malware in hiagentxhjrceme
1 compromised version
- Jan 27, 2026
Malware in shopee-chat
1 compromised version
- Jan 27, 2026
Malicious code in @row-components/pricing-embedded-sui (npm)
3 compromised versions
- Jan 27, 2026
Malware in @row-components/pricing-embedded-sui
1 compromised version
- Jan 27, 2026
Malicious code in tailwind-components-cli (npm)
- Jan 27, 2026
Malware in tailwind-components-cli
1 compromised version
- Jan 27, 2026
Malicious code in n8n-nodes-xkwqpzrt-jmflhvbn-dsyocgxwmkelpt (npm)
- Jan 27, 2026
Malicious code in n8n-nodes-gg-udhasudsh-hgjkhg-official (npm)
53 compromised versions
- Jan 27, 2026
Malicious code in n8n-nodes-gasdhgfuy-rejerw-ytjsadx (npm)
- Jan 27, 2026
Malware in n8n-nodes-gg-udhasudsh-hgjkhg-official
1 compromised version
- Jan 27, 2026
Malware in n8n-nodes-gasdhgfuy-rejerw-ytjsadx
1 compromised version
- Jan 27, 2026
Malware in n8n-nodes-xkwqpzrt-jmflhvbn-dsyocgxwmkelpt
1 compromised version
- Jan 27, 2026
Malicious code in fileupload-core (npm)
2 compromised versions
- Jan 27, 2026
Malware in fileupload-core
1 compromised version
- Jan 27, 2026
Malicious code in @shije/new-qs (npm)
2 compromised versions
- Jan 27, 2026
Malware in @shije/new-qs
1 compromised version
- Jan 27, 2026
Malicious code in ftm-noderpc (npm)
16 compromised versions
- Jan 27, 2026
Malware in ftm-noderpc
1 compromised version
- Jan 27, 2026
Malware in pay-by-bank-dashboard-server
1 compromised version
- Jan 27, 2026
Malicious code in sandbox-hooks (npm)
3 compromised versions
- Jan 27, 2026
Malicious code in mapkit-example-vue (npm)
- Jan 27, 2026
Malicious code in mapkit-example-svelte (npm)
- Jan 27, 2026
Malicious code in magento-coding-standard-eslint-plugin (npm)
2 compromised versions
- Jan 27, 2026
Malicious code in hammer-jquery (npm)
3 compromised versions
- Jan 27, 2026
Malware in mapkit-example-vue
1 compromised version
- Jan 27, 2026
Malware in symphony-fairvis
1 compromised version
- Jan 27, 2026
Malware in mapkit-example-svelte
1 compromised version
- Jan 27, 2026
Malware in hammer-jquery
1 compromised version
- Jan 27, 2026
Malware in magento-coding-standard-eslint-plugin
1 compromised version
- Jan 27, 2026
Malware in sandbox-hooks
1 compromised version
- Jan 27, 2026
Malware in com.unity.xr.visionos
1 compromised version
- Jan 27, 2026
Malicious code in @afg-ikea/ikea-modals (npm)
2 compromised versions
- Jan 27, 2026
Malware in @afg-ikea/ikea-modals
1 compromised version
- Jan 27, 2026
Malicious code in @afg-ikea/ikea-kiosk-related-components (npm)
2 compromised versions
- Jan 27, 2026
Malicious code in @afg-ikea/ikea-family-registration-module (npm)
2 compromised versions
- Jan 27, 2026
Malware in @afg-ikea/ikea-family-registration-module
1 compromised version
- Jan 27, 2026
Malware in @afg-ikea/ikea-kiosk-related-components
1 compromised version
- Jan 27, 2026
Malware in overstock-jenkins
1 compromised version
- Jan 27, 2026
Malware in ostk-otel-autoconfig
1 compromised version
- Jan 27, 2026
Malware in overstock-logger
1 compromised version
- Jan 27, 2026
Malware in overstock-login-layer
1 compromised version
- Jan 27, 2026
Malware in overstock-component-library-v3
1 compromised version
- Jan 27, 2026
Malware in overstock-health-express
1 compromised version
- Jan 27, 2026
Malware in overstock-component-library
1 compromised version
- Jan 26, 2026
Malicious code in @sommos/create-program-template-form-data (npm)
1 compromised version
- Jan 26, 2026
Malware in rank4222wun
1 compromised version
- Jan 26, 2026
Malicious code in cartos-dds-ui (npm)
1 compromised version
- Jan 26, 2026
Malicious code in @snazah/davey (npm)
2 compromised versions
Page 186 of 4,807