Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,322 total in npm · sorted newest first- Jan 8, 2026
Malware in timeout-ts
1 compromised version
- Jan 8, 2026
Malicious code in week-4-node-modularization (npm)
- Jan 8, 2026
Malicious code in svelte-monorepo (npm)
- Jan 8, 2026
Malicious code in hoppscotch-agent (npm)
- Jan 8, 2026
Malicious code in bnia-work (npm)
- Jan 8, 2026
Malware in svelte-monorepo
1 compromised version
- Jan 8, 2026
Malware in hoppscotch-agent
1 compromised version
- Jan 8, 2026
Malware in week-4-node-modularization
1 compromised version
- Jan 8, 2026
Malware in bnia-work
1 compromised version
- Jan 8, 2026
Malicious code in @testfeii/hallo-word (npm)
1 compromised version
- Jan 7, 2026
Malicious code in spark-ar-jest-mocks (npm)
- Jan 7, 2026
Malicious code in spark-ar-dynamic-mocks (npm)
- Jan 7, 2026
Malicious code in spark-ar-core-libs (npm)
- Jan 7, 2026
Malicious code in rt-text-media-grid-collection (npm)
- Jan 7, 2026
Malicious code in rt-qa-sampler (npm)
- Jan 7, 2026
Malicious code in rt-long-form-content (npm)
- Jan 7, 2026
Malicious code in rt-live-hero (npm)
- Jan 7, 2026
Malicious code in rt-global-nav (npm)
- Jan 7, 2026
Malicious code in rt-footer (npm)
- Jan 7, 2026
Malicious code in rt-da-classic-card-collection (npm)
- Jan 7, 2026
Malicious code in npe-toolkit-server-deps (npm)
- Jan 7, 2026
Malicious code in npe-toolkit-faves (npm)
- Jan 7, 2026
Malicious code in language-capirca (npm)
- Jan 7, 2026
Malicious code in create-react-app-lambda (npm)
- Jan 7, 2026
Malicious code in awsm-core (npm)
- Jan 7, 2026
Malicious code in awsm-acslibs (npm)
- Jan 7, 2026
Malicious code in aws-target-mediator (npm)
- Jan 7, 2026
Malware in rt-text-media-grid-collection
1 compromised version
- Jan 7, 2026
Malware in meta-code-verify
1 compromised version
- Jan 7, 2026
Malware in awsm-core
1 compromised version
- Jan 7, 2026
Malware in rt-qa-sampler
1 compromised version
- Jan 7, 2026
Malware in rt-footer
1 compromised version
- Jan 7, 2026
Malware in spark-ar-jest-mocks
1 compromised version
- Jan 7, 2026
Malware in adyen-web-v5
1 compromised version
- Jan 7, 2026
Malware in rt-da-classic-card-collection
1 compromised version
- Jan 7, 2026
Malware in spark-math
1 compromised version
- Jan 7, 2026
Malware in rt-global-nav
1 compromised version
- Jan 7, 2026
Malware in aws-target-mediator
1 compromised version
- Jan 7, 2026
Malware in spark-ar-core-libs
1 compromised version
- Jan 7, 2026
Malware in npe-toolkit-faves
1 compromised version
- Jan 7, 2026
Malware in create-react-app-lambda
1 compromised version
- Jan 7, 2026
Malware in npe-toolkit-server-deps
1 compromised version
- Jan 7, 2026
Malware in spark-ar-dynamic-mocks
1 compromised version
- Jan 7, 2026
Malware in rt-long-form-content
1 compromised version
- Jan 7, 2026
Malware in language-capirca
1 compromised version
- Jan 7, 2026
Malware in awsm-acslibs
1 compromised version
- Jan 7, 2026
Malware in rt-live-hero
1 compromised version
- Jan 7, 2026
Malicious code in scrollbar-stylecss (npm)
- Jan 7, 2026
Malware in scrollbar-stylecss
1 compromised version
- Jan 7, 2026
Malicious code in tailwind-autoanimation (npm)
Page 199 of 4,807