Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,307 total in npm · sorted newest first- Jan 21, 2026
Malicious code in debox-rn (npm)
- Jan 21, 2026
Malware in debox-rn
1 compromised version
- Jan 21, 2026
Malicious code in testpkg-yilider690 (npm)
- Jan 21, 2026
Malware in testpkg-yilider690
1 compromised version
- Jan 21, 2026
Malware in @testfeii/hallo-word
1 compromised version
- Jan 21, 2026
Malicious code in shroom-kit (npm)
- Jan 21, 2026
Malicious code in oce-validate (npm)
- Jan 21, 2026
Malicious code in oce-icons (npm)
- Jan 21, 2026
Malicious code in oce-freecoin (npm)
- Jan 21, 2026
Malicious code in oce-components (npm)
- Jan 21, 2026
Malicious code in oce-collaborate (npm)
- Jan 21, 2026
Malicious code in connect-web (npm)
- Jan 21, 2026
Malicious code in collaborate (npm)
- Jan 21, 2026
Malicious code in clerk-js (npm)
- Jan 21, 2026
Malware in clerk-js
1 compromised version
- Jan 21, 2026
Malware in shroom-kit
1 compromised version
- Jan 21, 2026
Malware in oce-freecoin
1 compromised version
- Jan 21, 2026
Malware in oce-validate
1 compromised version
- Jan 21, 2026
Malware in collaborate
1 compromised version
- Jan 21, 2026
Malware in oce-collaborate
1 compromised version
- Jan 21, 2026
Malware in oce-components
1 compromised version
- Jan 21, 2026
Malware in client-lambda
1 compromised version
- Jan 21, 2026
Malware in oce-icons
1 compromised version
- Jan 21, 2026
Malware in connect-web
1 compromised version
- Jan 21, 2026
Malicious code in kanban-webcomponent (npm)
- Jan 21, 2026
Malicious code in coopshares-webcomponent (npm)
- Jan 21, 2026
Malicious code in bitbot (npm)
- Jan 21, 2026
Malware in coopshares-webcomponent
1 compromised version
- Jan 21, 2026
Malware in bitbot
1 compromised version
- Jan 21, 2026
Malware in kanban-webcomponent
1 compromised version
- Jan 21, 2026
Malicious code in wallet-adapter-react (npm)
1 compromised version
- Jan 21, 2026
Malware in wallet-adapter-react
1 compromised version
- Jan 21, 2026
Malicious code in universal-provider (npm)
- Jan 21, 2026
Malicious code in sign-client (npm)
- Jan 21, 2026
Malicious code in hw-app-eth (npm)
- Jan 21, 2026
Malicious code in anthropic-sdk (npm)
- Jan 21, 2026
Malware in universal-provider
1 compromised version
- Jan 21, 2026
Malware in anthropic-sdk
1 compromised version
- Jan 21, 2026
Malware in sign-client
1 compromised version
- Jan 21, 2026
Malware in hw-app-eth
1 compromised version
- Jan 21, 2026
Malicious code in @kyriba/platform-frontend (npm)
- Jan 21, 2026
Malware in @kyriba/mf-kit
1 compromised version
- Jan 21, 2026
Malware in @kyriba/ui-workspace
1 compromised version
- Jan 21, 2026
Malware in @kyriba/data-frontend
1 compromised version
- Jan 21, 2026
Malware in @kyriba/platform-frontend
1 compromised version
- Jan 21, 2026
Malicious code in internallib_v962 (npm)
- Jan 21, 2026
Malicious code in internallib_v325 (npm)
- Jan 21, 2026
Malicious code in @joaoxxx/internallib-v325 (npm)
- Jan 21, 2026
Malware in internallib_v325
1 compromised version
- Jan 21, 2026
Malware in @joaoxxx/internallib-v325
1 compromised version
Page 189 of 4,807