Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,003 total in npm · sorted newest first- Jul 7, 2026
Malicious code in express-firegate (npm)
- Jul 7, 2026
Malicious code in express-deflect (npm)
2 compromised versions
- Jul 7, 2026
Malicious code in chai-spycore (npm)
2 compromised versions
- Jul 7, 2026
Malicious code in zluri-ad-connector (npm)
1 compromised version
- Jul 7, 2026
Malicious code in express-mongo-limit (npm)
7 compromised versions
- Jul 7, 2026
Malicious code in vps-adapter-core (npm)
3 compromised versions
- Jul 7, 2026
Malicious code in paperclip-host-utils (npm)
7 compromised versions
- Jul 6, 2026
Malicious code in xnder-sdk-js (npm)
1 compromised version
- Jul 6, 2026
Malicious code in winston-prism (npm)
1 compromised version
- Jul 6, 2026
Malicious code in winston-js-express (npm)
8 compromised versions
- Jul 6, 2026
Malicious code in wime-zle (npm)
1 compromised version
- Jul 6, 2026
Malicious code in vite-plugin-svg-paths (npm)
5 compromised versions
- Jul 6, 2026
Malicious code in tailwindcss-animatecss-latest (npm)
2 compromised versions
- Jul 6, 2026
Malicious code in windrule-utils (npm)
1 compromised version
- Jul 6, 2026
Malicious code in tailwindcss-fonttypo-inter (npm)
1 compromised version
- Jul 6, 2026
Malicious code in twcompose-utils (npm)
2 compromised versions
- Jul 6, 2026
Malicious code in txs-data (npm)
1 compromised version
- Jul 6, 2026
Malicious code in renderctx (npm)
1 compromised version
- Jul 6, 2026
Malicious code in ts-lint-builders (npm)
1 compromised version
- Jul 6, 2026
Malicious code in ts-eslinter (npm)
1 compromised version
- Jul 6, 2026
Malicious code in rma-utils (npm)
1 compromised version
- Jul 6, 2026
Malicious code in ts-relayer-pub (npm)
1 compromised version
- Jul 6, 2026
Malicious code in competion (npm)
4 compromised versions
- Jul 6, 2026
Malicious code in ts-bigtn (npm)
2 compromised versions
- Jul 6, 2026
Malicious code in tracing-str (npm)
6 compromised versions
- Jul 6, 2026
Malicious code in test-prettier (npm)
1 compromised version
- Jul 6, 2026
Malicious code in color-cli-log (npm)
2 compromised versions
- Jul 6, 2026
Malicious code in tailwindcss-svg-helper (npm)
2 compromised versions
- Jul 6, 2026
Malicious code in tailwindcss-fonttype-inter (npm)
2 compromised versions
- Jul 6, 2026
Malicious code in tailwindcss-framer-motion (npm)
1 compromised version
- Jul 6, 2026
Malicious code in stacknova (npm)
1 compromised version
- Jul 6, 2026
Malicious code in st-biginteger (npm)
1 compromised version
- Jul 6, 2026
Malicious code in sol-sdk (npm)
1 compromised version
- Jul 6, 2026
Malicious code in sleek-pretty (npm)
1 compromised version
- Jul 6, 2026
Malicious code in tailwind-fonttype-inter (npm)
1 compromised version
- Jul 6, 2026
Malicious code in tailstyle-core (npm)
1 compromised version
- Jul 6, 2026
Malicious code in syncora (npm)
1 compromised version
- Jul 6, 2026
Malicious code in tailwind-scroller (npm)
1 compromised version
- Jul 6, 2026
Malicious code in styled-text-logger (npm)
1 compromised version
- Jul 6, 2026
Malicious code in secure-box (npm)
2 compromised versions
- Jul 6, 2026
Malicious code in st-bigintr (npm)
2 compromised versions
- Jul 6, 2026
Malicious code in sjs-builders (npm)
1 compromised version
- Jul 6, 2026
Malicious code in sjs-builder (npm)
2 compromised versions
- Jul 6, 2026
Malicious code in safe-validate (npm)
4 compromised versions
- Jul 6, 2026
Malicious code in router-kit (npm)
30 compromised versions
- Jul 6, 2026
Malicious code in react-svg-render (npm)
1 compromised version
- Jul 6, 2026
Malicious code in react-native-template-my-starter (npm)
1 compromised version
- Jul 6, 2026
Malicious code in pretty-pino-logger (npm)
7 compromised versions
- Jul 6, 2026
Malicious code in pretty-pino-loggers (npm)
1 compromised version
- Jul 6, 2026
Malicious code in prettier-logger (npm)
3 compromised versions
Page 24 of 4,801