Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,322 total in npm · sorted newest first- Jan 16, 2026
Malware in sd-navbar-module-client
1 compromised version
- Jan 16, 2026
Malware in sd-agent-toolbar-module-client
1 compromised version
- Jan 16, 2026
Malware in mui7
1 compromised version
- Jan 16, 2026
Malware in zis-common-lib
1 compromised version
- Jan 16, 2026
Malware in react-sitecore-library
1 compromised version
- Jan 16, 2026
Malware in assurance-common-components
1 compromised version
- Jan 16, 2026
Malware in lusha-widgets
1 compromised version
- Jan 16, 2026
Malware in sd-pdc-module-client
1 compromised version
- Jan 16, 2026
Malware in dws-dx
1 compromised version
- Jan 16, 2026
Malware in dibels8-content
1 compromised version
- Jan 16, 2026
Malware in sd-active-conversation-module-client
1 compromised version
- Jan 16, 2026
Malware in oe-oauth
1 compromised version
- Jan 16, 2026
Malware in sd-conversation-history-module-client
1 compromised version
- Jan 16, 2026
Malware in textual-sorter-lib
1 compromised version
- Jan 16, 2026
Malware in tailwind-merge-v2
1 compromised version
- Jan 16, 2026
Malware in mui7icons
1 compromised version
- Jan 16, 2026
Malware in js-observability
1 compromised version
- Jan 16, 2026
Malware in styled-system-old
1 compromised version
- Jan 16, 2026
Malware in tailwind-merge-v3
1 compromised version
- Jan 16, 2026
Malware in eniram-web-common-ui
1 compromised version
- Jan 16, 2026
Malware in lusha-ui-components
1 compromised version
- Jan 16, 2026
Malware in omnicore-ds2-sdk
1 compromised version
- Jan 16, 2026
Malware in lusha-micro-app-messages
1 compromised version
- Jan 16, 2026
Malicious code in admin10001 (npm)
102 compromised versions
- Jan 16, 2026
Malicious code in flip-prx (npm)
1 compromised version
- Jan 16, 2026
Malware in flip-prx
1 compromised version
- Jan 16, 2026
Malware in admin1001
1 compromised version
- Jan 16, 2026
Malicious code in zis-common-lib (npm)
- Jan 16, 2026
Malicious code in vue_frontend_rpc (npm)
- Jan 16, 2026
Malicious code in victim-package-a (npm)
3 compromised versions
- Jan 16, 2026
Malicious code in textual-sorter-lib (npm)
- Jan 16, 2026
Malicious code in tailwind-merge-v3 (npm)
- Jan 16, 2026
Malicious code in tailwind-merge-v2 (npm)
- Jan 16, 2026
Malicious code in styled-system-old (npm)
- Jan 16, 2026
Malicious code in spire.officejs-fonts (npm)
- Jan 16, 2026
Malicious code in spire.officejs-externs (npm)
- Jan 16, 2026
Malicious code in sparkling-router (npm)
1 compromised version
- Jan 16, 2026
Malicious code in sky1oauth2 (npm)
1 compromised version
- Jan 16, 2026
Malicious code in sd-pdc-module-client (npm)
- Jan 16, 2026
Malicious code in sd-navbar-module-client (npm)
- Jan 16, 2026
Malicious code in sd-conversation-history-module-client (npm)
- Jan 16, 2026
Malicious code in sd-cip-module-client (npm)
- Jan 16, 2026
Malicious code in sd-ccp-module-client (npm)
- Jan 16, 2026
Malicious code in sd-agent-toolbar-module-client (npm)
- Jan 16, 2026
Malicious code in sd-active-conversation-module-client (npm)
- Jan 16, 2026
Malicious code in s3-cache-handler (npm)
- Jan 16, 2026
Malicious code in react-sitecore-library (npm)
- Jan 16, 2026
Malicious code in presentation-test-utilities (npm)
- Jan 16, 2026
Malicious code in origin_response_handler (npm)
- Jan 16, 2026
Malicious code in omnicore-ds2-sdk2 (npm)
2 compromised versions
Page 194 of 4,807