Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,307 total in npm · sorted newest first- Jan 26, 2026
Malicious code in tripica-library (npm)
1 compromised version
- Jan 25, 2026
Malicious code in braintree-web-latest (npm)
1 compromised version
- Jan 25, 2026
Malicious code in overstock-component-library (npm)
4 compromised versions
- Jan 25, 2026
Malicious code in overstock-login-layer (npm)
4 compromised versions
- Jan 25, 2026
Malicious code in ostk-otel-autoconfig (npm)
3 compromised versions
- Jan 25, 2026
Malicious code in overstock-component-library-v3 (npm)
4 compromised versions
- Jan 25, 2026
Malicious code in zabittest11 (npm)
1 compromised version
- Jan 23, 2026
Malicious code in overstock-jenkins (npm)
5 compromised versions
- Jan 23, 2026
Malicious code in overstock-health-express (npm)
4 compromised versions
- Jan 23, 2026
Malicious code in test-on-other (npm)
1 compromised version
- Jan 23, 2026
Malicious code in hemi-btc-staking-actions (npm)
- Jan 23, 2026
Malicious code in h-jsencrypt (npm)
- Jan 23, 2026
Malicious code in eits (npm)
- Jan 23, 2026
Malicious code in oxnoxon (npm)
1 compromised version
- Jan 23, 2026
Malicious code in test-on-other-again (npm)
1 compromised version
- Jan 23, 2026
Malicious code in rank4222wun (npm)
40 compromised versions
- Jan 23, 2026
Malicious code in ntwsx (npm)
- Jan 23, 2026
Malicious code in ntwsc (npm)
- Jan 23, 2026
Malicious code in a5xm (npm)
- Jan 23, 2026
Malware in ntwsx
1 compromised version
- Jan 23, 2026
Malware in ntwsc
1 compromised version
- Jan 23, 2026
Malware in a5xm
1 compromised version
- Jan 23, 2026
Malicious code in a4wu (npm)
- Jan 23, 2026
Malware in a4wu
1 compromised version
- Jan 23, 2026
Malicious code in translation-note (npm)
3 compromised versions
- Jan 23, 2026
Malicious code in public-site-cms-ui (npm)
- Jan 23, 2026
Malicious code in public-site-boostmoney-ui (npm)
- Jan 23, 2026
Malicious code in oasis-os-provider-messaging (npm)
3 compromised versions
- Jan 23, 2026
Malicious code in kwp-shared-components-production-system (npm)
4 compromised versions
- Jan 23, 2026
Malicious code in integromat-ui (npm)
- Jan 23, 2026
Malicious code in domino-elements (npm)
- Jan 23, 2026
Malicious code in bttr-devs (npm)
- Jan 23, 2026
Malicious code in @transaction-list/transaction-list-xs (npm)
- Jan 23, 2026
Malicious code in @transaction-list/transaction-list-sm (npm)
- Jan 23, 2026
Malicious code in @transaction-list/transaction-list-md (npm)
- Jan 23, 2026
Malicious code in @transaction-list/transaction-list-lg (npm)
- Jan 23, 2026
Malicious code in @landing-platform/data-bridge (npm)
- Jan 23, 2026
Malicious code in @acqui-calm-library/acqui-hero-carousel-section (npm)
- Jan 22, 2026
Malicious code in uuu8lgd (npm)
10 compromised versions
- Jan 22, 2026
Malicious code in @ikeacn/utils (npm)
- Jan 22, 2026
Malicious code in @ikeacn/icons (npm)
- Jan 22, 2026
Malware in @ikeacn/icons
1 compromised version
- Jan 22, 2026
Malware in @ikeacn/ui
1 compromised version
- Jan 22, 2026
Malware in @ikeacn/utils
1 compromised version
- Jan 22, 2026
Malicious code in @corp-front/corporate-filter-company-select (npm)
1 compromised version
- Jan 22, 2026
Malicious code in @ikeacn/ui (npm)
1 compromised version
- Jan 22, 2026
Malicious code in corporate-blocking (npm)
1 compromised version
- Jan 22, 2026
Malicious code in pay-by-bank-dashboard-server (npm)
9 compromised versions
- Jan 22, 2026
Malicious code in un112 (npm)
11 compromised versions
- Jan 22, 2026
Malicious code in @mailpoet/eslint-config (npm)
Page 187 of 4,807