Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,347 total in npm · sorted newest first- Nov 26, 2025
Malware in @voiceflow/vite-config
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/verror
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/tsconfig
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/test-common
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/stylelint-config
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/stitches-react
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/slate-serializer
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/semantic-release-config
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/secrets-provider
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/sdk-runtime
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/runtime
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/react-chat
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/prettier-config
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/nestjs-timeout
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/nestjs-redis
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/nestjs-mongodb
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/nestjs-common
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/natural-language-commander
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/metrics
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/logger
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/husky-config
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/google-types
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/google-dfes-types
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/git-branch-check
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/general-types
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/fetch
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/exception
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/eslint-plugin
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/eslint-config
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/encryption
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/dtos-interact
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/dependency-cruiser-config
1 compromised version
- Nov 26, 2025
Malware in @voiceflow/default-prompt-wrappers
1 compromised version
- Nov 25, 2025
Malware in @voiceflow/common
1 compromised version
- Nov 25, 2025
Malware in @voiceflow/commitlint-config
1 compromised version
- Nov 25, 2025
Malware in @voiceflow/chat-types
1 compromised version
- Nov 25, 2025
Malware in @voiceflow/body-parser
1 compromised version
- Nov 25, 2025
Malware in @voiceflow/base-types
1 compromised version
- Nov 25, 2025
Malware in @voiceflow/backend-utils
1 compromised version
- Nov 25, 2025
Malware in @voiceflow/api-sdk
1 compromised version
- Nov 25, 2025
Malware in @voiceflow/alexa-types
1 compromised version
- Nov 25, 2025
Malware in @productdevbook/chatwoot
1 compromised version
- Nov 25, 2025
Malware in @kvytech/medusa-plugin-promotion
1 compromised version
- Nov 25, 2025
Malware in @dev-blinq/ui-systems
1 compromised version
- Nov 25, 2025
Malware in @dev-blinq/cucumber-js
1 compromised version
- Nov 25, 2025
Malware in @dev-blinq/ai-qa-logic
1 compromised version
- Nov 25, 2025
Malware in @antstackio/graphql-body-parser
1 compromised version
- Nov 25, 2025
Malware in @alexcolls/nuxt-ux
1 compromised version
- Nov 25, 2025
Malware in @alexcolls/nuxt-socket.io
1 compromised version
- Nov 25, 2025
Malware in @actbase/native
1 compromised version
Page 234 of 4,807