Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,307 total in npm · sorted newest first- Jan 21, 2026
Malicious code in victim-package-c (npm)
1 compromised version
- Jan 21, 2026
Malicious code in victim-package-b (npm)
1 compromised version
- Jan 21, 2026
Malware in victim-package-b
1 compromised version
- Jan 21, 2026
Malware in victim-package-c
1 compromised version
- Jan 21, 2026
Malware in kc-fe-cli
1 compromised version
- Jan 21, 2026
Malware in victim-package-a
1 compromised version
- Jan 21, 2026
Malicious code in potdf (npm)
- Jan 21, 2026
Malware in potdf
1 compromised version
- Jan 20, 2026
Malicious code in mised-discordjs-selfbot-v14 (npm)
- Jan 20, 2026
Malware in mised-discordjs-selfbot-v14
1 compromised version
- Jan 20, 2026
Malicious code in theme-neutral (npm)
- Jan 20, 2026
Malware in theme-neutral
1 compromised version
- Jan 20, 2026
Malicious code in sezzle (npm)
- Jan 20, 2026
Malware in sezzle
1 compromised version
- Jan 20, 2026
Malicious code in webmd-debug (npm)
- Jan 20, 2026
Malicious code in mw-shared-utils (npm)
- Jan 20, 2026
Malicious code in mw-proto-models (npm)
- Jan 20, 2026
Malware in mw-proto-models
1 compromised version
- Jan 20, 2026
Malware in webmd-page-common
1 compromised version
- Jan 20, 2026
Malware in mw-shared-utils
1 compromised version
- Jan 20, 2026
Malware in webmd-debug
1 compromised version
- Jan 20, 2026
Malicious code in webmd-cookie (npm)
- Jan 20, 2026
Malware in webmd-cookie
1 compromised version
- Jan 20, 2026
Malicious code in dreame-claude (npm)
- Jan 20, 2026
Malware in dreame-claude
1 compromised version
- Jan 20, 2026
Malicious code in uq-global-ec-uikit (npm)
- Jan 20, 2026
Malicious code in shared-global-ec-uikit (npm)
- Jan 20, 2026
Malicious code in pl-global-ec-uikit (npm)
- Jan 20, 2026
Malicious code in gu-global-ec-uikit (npm)
- Jan 20, 2026
Malicious code in excel-to-json-test (npm)
- Jan 20, 2026
Malware in excel-to-json-test
1 compromised version
- Jan 20, 2026
Malware in gu-global-ec-uikit
1 compromised version
- Jan 20, 2026
Malware in shared-global-ec-uikit
1 compromised version
- Jan 20, 2026
Malware in pl-global-ec-uikit
1 compromised version
- Jan 20, 2026
Malware in uq-global-ec-uikit
1 compromised version
- Jan 20, 2026
Malicious code in telia-eventapi-client (npm)
- Jan 20, 2026
Malware in telia-eventapi-client
1 compromised version
- Jan 20, 2026
Malicious code in testing-package-bose (npm)
- Jan 20, 2026
Malware in testing-package-bose
1 compromised version
- Jan 20, 2026
Malicious code in chai-bin (npm)
- Jan 20, 2026
Malware in chai-bin
1 compromised version
- Jan 20, 2026
Malicious code in health-check-node (npm)
- Jan 20, 2026
Malware in health-check-node
1 compromised version
- Jan 20, 2026
Malicious code in dot-env-buffer (npm)
- Jan 20, 2026
Malware in dot-env-buffer
1 compromised version
- Jan 20, 2026
Malicious code in advanced-svg-fetcher (npm)
- Jan 20, 2026
Malware in advanced-svg-fetcher
1 compromised version
- Jan 20, 2026
Malicious code in dux-portal (npm)
- Jan 20, 2026
Malware in dux-portal
1 compromised version
- Jan 20, 2026
Malicious code in dux-portal-privacy (npm)
Page 191 of 4,807