Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,322 total in npm · sorted newest first- Jan 7, 2026
Malware in tailwind-autoanimation
1 compromised version
- Jan 7, 2026
Malicious code in cko-ui-toolkit (npm)
1 compromised version
- Jan 7, 2026
Malicious code in @bingads-webui-component-legacy/storage (npm)
1 compromised version
- Jan 7, 2026
Malicious code in kmeet (npm)
1 compromised version
- Jan 7, 2026
Malicious code in wwwt (npm)
- Jan 7, 2026
Malicious code in wifzap (npm)
- Jan 7, 2026
Malicious code in vjri (npm)
- Jan 7, 2026
Malicious code in syqara (npm)
- Jan 7, 2026
Malicious code in qyxb (npm)
- Jan 7, 2026
Malicious code in klywarns (npm)
- Jan 7, 2026
Malicious code in klywarn (npm)
- Jan 7, 2026
Malicious code in jh5o (npm)
- Jan 7, 2026
Malicious code in hiqomu (npm)
- Jan 7, 2026
Malicious code in garfield777 (npm)
- Jan 7, 2026
Malicious code in garfield000 (npm)
- Jan 7, 2026
Malicious code in aog3 (npm)
- Jan 7, 2026
Malicious code in @nestor_hexom/qyxb (npm)
- Jan 7, 2026
Malicious code in @nestor_hexom/garfield1 (npm)
- Jan 7, 2026
Malicious code in @nestor_hexom/garfield (npm)
- Jan 7, 2026
Malware in qyxb
1 compromised version
- Jan 7, 2026
Malware in aog3
1 compromised version
- Jan 7, 2026
Malware in jh5o
1 compromised version
- Jan 7, 2026
Malware in syqara
1 compromised version
- Jan 7, 2026
Malware in garfield777
1 compromised version
- Jan 7, 2026
Malware in hiqomu
1 compromised version
- Jan 7, 2026
Malware in @nestor_hexom/garfield
1 compromised version
- Jan 7, 2026
Malware in klywarn
1 compromised version
- Jan 7, 2026
Malware in wifzap
1 compromised version
- Jan 7, 2026
Malware in vjri
1 compromised version
- Jan 7, 2026
Malware in @nestor_hexom/qyxb
1 compromised version
- Jan 7, 2026
Malware in klywarns
1 compromised version
- Jan 7, 2026
Malware in @nestor_hexom/garfield1
1 compromised version
- Jan 7, 2026
Malware in wwwt
1 compromised version
- Jan 7, 2026
Malware in garfield000
1 compromised version
- Jan 7, 2026
Malicious code in kdb1-demo-v2 (npm)
- Jan 7, 2026
Malicious code in fbfu (npm)
- Jan 7, 2026
Malicious code in 1kzr (npm)
- Jan 7, 2026
Malware in 1kzr
1 compromised version
- Jan 7, 2026
Malware in fbfu
1 compromised version
- Jan 7, 2026
Malware in kdb1-demo-v2
1 compromised version
- Jan 7, 2026
Malicious code in transform-decorators-legacy (npm)
- Jan 7, 2026
Malicious code in syntax-class-properties (npm)
- Jan 7, 2026
Malicious code in sort-imports-es6-autofix (npm)
- Jan 7, 2026
Malicious code in const-enum (npm)
- Jan 7, 2026
Malware in const-enum
1 compromised version
- Jan 7, 2026
Malware in transform-decorators-legacy
1 compromised version
- Jan 7, 2026
Malware in sort-imports-es6-autofix
1 compromised version
- Jan 7, 2026
Malware in syntax-class-properties
1 compromised version
- Jan 7, 2026
Malicious code in openblox-ts (npm)
- Jan 7, 2026
Malware in openblox-ts
1 compromised version
Page 200 of 4,807