Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,322 total in npm · sorted newest first- Jan 12, 2026
Malicious code in analytics-browser (npm)
- Jan 12, 2026
Malware in gradle-plugin
1 compromised version
- Jan 12, 2026
Malware in experimental-utils
1 compromised version
- Jan 12, 2026
Malware in firestore-types
1 compromised version
- Jan 12, 2026
Malware in analytics-browser
1 compromised version
- Jan 12, 2026
Malware in auth-types
1 compromised version
- Jan 12, 2026
Malicious code in lyonscg (npm)
- Jan 12, 2026
Malicious code in @workleap-widgets/client (npm)
- Jan 12, 2026
Malicious code in @workleap-ai/shared (npm)
- Jan 12, 2026
Malicious code in @t4i-cms-components/contact-card (npm)
- Jan 12, 2026
Malicious code in @gwp-gtmt-components/event-listener (npm)
- Jan 12, 2026
Malware in @gwp-gtmt-components/event-listener
1 compromised version
- Jan 12, 2026
Malware in @t4i-cms-components/contact-card
1 compromised version
- Jan 12, 2026
Malware in lyonscg
1 compromised version
- Jan 12, 2026
Malware in @workleap-widgets/client
1 compromised version
- Jan 12, 2026
Malware in @workleap-ai/shared
1 compromised version
- Jan 12, 2026
Malicious code in yargs-js (npm)
- Jan 12, 2026
Malicious code in terser-js (npm)
- Jan 12, 2026
Malicious code in rxjs-js (npm)
- Jan 12, 2026
Malicious code in pako-js (npm)
- Jan 12, 2026
Malicious code in body-parser-js (npm)
- Jan 12, 2026
Malware in rxjs-js
1 compromised version
- Jan 12, 2026
Malware in pako-js
1 compromised version
- Jan 12, 2026
Malware in yargs-js
1 compromised version
- Jan 12, 2026
Malware in terser-js
1 compromised version
- Jan 12, 2026
Malware in body-parser-js
1 compromised version
- Jan 11, 2026
Malicious code in shopee-chat (npm)
1 compromised version
- Jan 11, 2026
Malicious code in conmiyagi-map (npm)
1 compromised version
- Jan 10, 2026
Malicious code in mui7 (npm)
1 compromised version
- Jan 10, 2026
Malicious code in oe-oauth (npm)
1 compromised version
- Jan 10, 2026
Malicious code in wac-relay-runtime (npm)
1 compromised version
- Jan 10, 2026
Malicious code in mui7icons (npm)
1 compromised version
- Jan 10, 2026
Malicious code in vet-bones (npm)
1 compromised version
- Jan 10, 2026
Malicious code in wac-react (npm)
1 compromised version
- Jan 10, 2026
Malicious code in wac-react-dom (npm)
1 compromised version
- Jan 10, 2026
Malicious code in resto_ui_components (npm)
1 compromised version
- Jan 10, 2026
Malicious code in shopping-cart-service (npm)
1 compromised version
- Jan 9, 2026
Malicious code in n8n-nodes-vbmkajdsa-uehfitvv-ueqjhhhksdlkkmz (npm)
- Jan 9, 2026
Malicious code in n8n-nodes-hfgjf-irtuinvcm-lasdqewriit (npm)
- Jan 9, 2026
Malicious code in n8n-nodes-ggdv-hdfvcnnje-uyrokvbkl (npm)
- Jan 9, 2026
Malware in n8n-nodes-ggdv-hdfvcnnje-uyrokvbkl
1 compromised version
- Jan 9, 2026
Malware in n8n-nodes-vbmkajdsa-uehfitvv-ueqjhhhksdlkkmz
1 compromised version
- Jan 9, 2026
Malware in n8n-nodes-hfgjf-irtuinvcm-lasdqewriit
1 compromised version
- Jan 9, 2026
Malicious code in yunxohang7 (npm)
1 compromised version
- Jan 9, 2026
Malicious code in yunxohang6 (npm)
1 compromised version
- Jan 9, 2026
Malicious code in yunxohang5 (npm)
1 compromised version
- Jan 9, 2026
Malicious code in yunxohang11 (npm)
- Jan 9, 2026
Malicious code in yunxohang10 (npm)
- Jan 9, 2026
Malicious code in shreddit.styles (npm)
1 compromised version
- Jan 9, 2026
Malware in faceplate-ui
1 compromised version
Page 197 of 4,807