Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,372 total in npm · sorted newest first- Nov 25, 2025
Malicious code in @antstackio/json-to-graphql (npm)
1 compromised version
- Nov 25, 2025
Malicious code in @antstackio/graphql-body-parser (npm)
1 compromised version
- Nov 25, 2025
Malicious code in @antstackio/express-graphql-proxy (npm)
1 compromised version
- Nov 25, 2025
Malicious code in @antstackio/eslint-config-antstack (npm)
1 compromised version
- Nov 25, 2025
Malicious code in @alexcolls/nuxt-ux (npm)
2 compromised versions
- Nov 25, 2025
Malicious code in @alexcolls/nuxt-socket.io (npm)
2 compromised versions
- Nov 25, 2025
Malicious code in @afetcan/storage (npm)
1 compromised version
- Nov 25, 2025
Malicious code in @afetcan/api (npm)
1 compromised version
- Nov 25, 2025
Malicious code in @actbase/native (npm)
1 compromised version
- Nov 25, 2025
Malicious code in ra-auth-firebase (npm)
1 compromised version
- Nov 25, 2025
Malware in ra-auth-firebase
1 compromised version
- Nov 25, 2025
Malicious code in @bdkinc/knex-ibmi (npm)
1 compromised version
- Nov 25, 2025
Malware in @bdkinc/knex-ibmi
1 compromised version
- Nov 25, 2025
Malicious code in @axinom/mosaic-cli (npm)
1 compromised version
- Nov 25, 2025
Malware in @axinom/mosaic-cli
1 compromised version
- Nov 25, 2025
Malicious code in @alexadark/reusable-functions (npm)
1 compromised version
- Nov 25, 2025
Malware in @alexadark/reusable-functions
1 compromised version
- Nov 25, 2025
Malicious code in @alexadark/gatsby-theme-wordpress-blog (npm)
1 compromised version
- Nov 25, 2025
Malware in @alexadark/gatsby-theme-wordpress-blog
1 compromised version
- Nov 25, 2025
Malicious code in @alexadark/gatsby-theme-events (npm)
1 compromised version
- Nov 25, 2025
Malware in @alexadark/gatsby-theme-events
1 compromised version
- Nov 25, 2025
Malicious code in @alexadark/amadeus-api (npm)
1 compromised version
- Nov 25, 2025
Malware in @alexadark/amadeus-api
1 compromised version
- Nov 25, 2025
Malicious code in @accordproject/template-engine (npm)
1 compromised version
- Nov 25, 2025
Malware in @accordproject/template-engine
1 compromised version
- Nov 25, 2025
Malicious code in @accordproject/markdown-it-cicero (npm)
1 compromised version
- Nov 25, 2025
Malware in @accordproject/markdown-it-cicero
1 compromised version
- Nov 25, 2025
Malicious code in @accordproject/markdown-cli (npm)
1 compromised version
- Nov 25, 2025
Malware in @accordproject/markdown-cli
1 compromised version
- Nov 25, 2025
Malicious code in @accordproject/concerto-types (npm)
1 compromised version
- Nov 25, 2025
Malware in @accordproject/concerto-types
1 compromised version
- Nov 25, 2025
Malicious code in @accordproject/concerto-metamodel (npm)
1 compromised version
- Nov 25, 2025
Malware in @accordproject/concerto-metamodel
1 compromised version
- Nov 25, 2025
Malicious code in @accordproject/concerto-linter-default-ruleset (npm)
1 compromised version
- Nov 25, 2025
Malware in @accordproject/concerto-linter-default-ruleset
1 compromised version
- Nov 25, 2025
Malicious code in @accordproject/concerto-linter (npm)
1 compromised version
- Nov 25, 2025
Malware in @accordproject/concerto-linter
1 compromised version
- Nov 25, 2025
Malicious code in @accordproject/concerto-analysis (npm)
1 compromised version
- Nov 25, 2025
Malware in @accordproject/concerto-analysis
1 compromised version
- Nov 25, 2025
Malicious code in @browserbasehq/stagehand-docs (npm)
1 compromised version
- Nov 25, 2025
Malware in @browserbasehq/stagehand-docs
1 compromised version
- Nov 25, 2025
Malicious code in @browserbasehq/mcp (npm)
1 compromised version
- Nov 25, 2025
Malware in @browserbasehq/mcp
1 compromised version
- Nov 25, 2025
Malicious code in @browserbasehq/director-ai (npm)
1 compromised version
- Nov 25, 2025
Malware in @browserbasehq/director-ai
1 compromised version
- Nov 25, 2025
Malicious code in @browserbasehq/bb9 (npm)
1 compromised version
- Nov 25, 2025
Malware in @browserbasehq/bb9
1 compromised version
- Nov 25, 2025
Malicious code in @commute/market-data-chartjs (npm)
1 compromised version
- Nov 25, 2025
Malware in @commute/market-data-chartjs
1 compromised version
- Nov 25, 2025
Malicious code in @commute/market-data (npm)
1 compromised version
Page 239 of 4,808