Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,322 total in npm · sorted newest first- Jan 16, 2026
Malicious code in omnicore-ds2-sdk (npm)
- Jan 16, 2026
Malicious code in nyse-web-tools-common (npm)
- Jan 16, 2026
Malicious code in lusha-widgets (npm)
- Jan 16, 2026
Malicious code in lusha-ui-components (npm)
- Jan 16, 2026
Malicious code in lusha-micro-app-messages (npm)
- Jan 16, 2026
Malicious code in lusha-integrations-widgets (npm)
- Jan 16, 2026
Malicious code in lead-ion (npm)
- Jan 16, 2026
Malicious code in kc-fe-cli (npm)
- Jan 16, 2026
Malicious code in js-observability (npm)
- Jan 16, 2026
Malicious code in insightvm-ui-nav-menus (npm)
- Jan 16, 2026
Malicious code in idel2-content (npm)
- Jan 16, 2026
Malicious code in forms-new-design (npm)
2 compromised versions
- Jan 16, 2026
Malicious code in focus-trap-v2 (npm)
- Jan 16, 2026
Malicious code in flag-v211 (npm)
- Jan 16, 2026
Malicious code in flag-v21 (npm)
- Jan 16, 2026
Malicious code in eniram-web-common-ui (npm)
- Jan 16, 2026
Malicious code in dws-dx (npm)
- Jan 16, 2026
Malicious code in dibels8-content (npm)
- Jan 16, 2026
Malicious code in comstrap (npm)
- Jan 16, 2026
Malicious code in cognito-auth-plugin (npm)
- Jan 16, 2026
Malicious code in closure-net (npm)
- Jan 16, 2026
Malicious code in chakra-ui-2--theme-tools (npm)
- Jan 16, 2026
Malicious code in chakra-ui-2--styled-system (npm)
- Jan 16, 2026
Malicious code in chakra-ui-2--react-utils (npm)
- Jan 16, 2026
Malicious code in chakra-ui-2--react (npm)
- Jan 16, 2026
Malicious code in bve-react-ui-kit (npm)
- Jan 16, 2026
Malicious code in base-ui-vue3 (npm)
- Jan 16, 2026
Malicious code in auc-2-lib (npm)
- Jan 16, 2026
Malicious code in assurance-common-components (npm)
- Jan 16, 2026
Malicious code in alf-ui-js (npm)
- Jan 16, 2026
Malicious code in @wbgo/shared (npm)
5 compromised versions
- Jan 16, 2026
Malicious code in @wb-team/uikit-myteam-web (npm)
5 compromised versions
- Jan 16, 2026
Malicious code in @ux-foundry/palette (npm)
- Jan 16, 2026
Malicious code in @spx-workforceops/shared-vue (npm)
3 compromised versions
- Jan 16, 2026
Malicious code in @spx-smartsorting/vue (npm)
3 compromised versions
- Jan 16, 2026
Malicious code in @spx-delivery/react (npm)
3 compromised versions
- Jan 16, 2026
Malicious code in @servicepoint/vue-project (npm)
3 compromised versions
- Jan 16, 2026
Malicious code in @riag-libs/pattern-library-react-hooks (npm)
4 compromised versions
- Jan 15, 2026
Malicious code in experian-design-system (npm)
1 compromised version
- Jan 14, 2026
Malicious code in webmd-page-common (npm)
1 compromised version
- Jan 14, 2026
Malicious code in silvermine (npm)
1 compromised version
- Jan 13, 2026
Malicious code in ts-tweetnacl (npm)
1 compromised version
- Jan 13, 2026
Malicious code in admin1001 (npm)
74 compromised versions
- Jan 13, 2026
Malicious code in @flipster/utils (npm)
1 compromised version
- Jan 13, 2026
Malicious code in cnamts-captcha-component (npm)
- Jan 13, 2026
Malware in cnamts-captcha-component
1 compromised version
- Jan 13, 2026
Malicious code in helium-module (npm)
2 compromised versions
- Jan 13, 2026
Malware in helium-module
1 compromised version
- Jan 13, 2026
Malicious code in francium-web-visitors (npm)
2 compromised versions
- Jan 13, 2026
Malicious code in francium-utils (npm)
2 compromised versions
Page 195 of 4,807