Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
239,899 total in npm · sorted newest first- Jul 13, 2026
Malicious code in @uw010010/vite-tree (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in @sheltr_/agent (npm)
1 compromised version
- Jul 13, 2026
Malicious code in @origindev/ethaccount (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in @spzhongwin/skill-logger-plugin (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nodemon-sync (npm)
- Jul 13, 2026
Malicious code in hehehee (npm)
1 compromised version
- Jul 13, 2026
Malicious code in cktool-core (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in polymarket-math-stake-kelly (npm)
1 compromised version
- Jul 13, 2026
Malicious code in gptlite (npm)
1 compromised version
- Jul 13, 2026
Malicious code in polymarket-stake-kelly-math (npm)
1 compromised version
- Jul 13, 2026
Malicious code in compliancepolicyserv (npm)
1 compromised version
- Jul 13, 2026
Malicious code in connectedmerchantsserv (npm)
1 compromised version
- Jul 13, 2026
Malicious code in datavaultx (npm)
1 compromised version
- Jul 13, 2026
Malicious code in node-path-addon (npm)
1 compromised version
- Jul 13, 2026
Malicious code in node-procmetrics-data (npm)
1 compromised version
- Jul 13, 2026
Malicious code in node-sysmon-native (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nodemon-async (npm)
1 compromised version
- Jul 13, 2026
Malicious code in router-processor (npm)
1 compromised version
- Jul 13, 2026
Malicious code in font-hub (npm)
1 compromised version
- Jul 13, 2026
Malicious code in @sqlite-group/schema-generator (npm)
1 compromised version
- Jul 13, 2026
Malicious code in gifuct (npm)
1 compromised version
- Jul 13, 2026
Malicious code in auth-gen-next (npm)
1 compromised version
- Jul 13, 2026
Malicious code in markdown-editable-table (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in @oliviamcdaniel12/safer-buffer (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in react-markable-table (npm)
1 compromised version
- Jul 13, 2026
Malicious code in remarkable-table (npm)
1 compromised version
- Jul 13, 2026
Malicious code in markable-table (npm)
9 compromised versions
- Jul 13, 2026
Malicious code in home-sections-web-ui (npm)
1 compromised version
- Jul 13, 2026
Malicious code in node-procmetrics (npm)
10 compromised versions
- Jul 13, 2026
Malicious code in fetchcraft (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in netspeedutil (npm)
1 compromised version
- Jul 13, 2026
Malicious code in jest-formatter (npm)
1 compromised version
- Jul 13, 2026
Malicious code in env-fast (npm)
1 compromised version
- Jul 13, 2026
Malicious code in @tailwind-ts/eslint-plugin (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in type-context (npm)
4 compromised versions
- Jul 13, 2026
Malicious code in react-hot-svg (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in chain-guardian (npm)
1 compromised version
- Jul 13, 2026
Malicious code in animated-css-kit (npm)
1 compromised version
- Jul 13, 2026
Malicious code in jsonfb (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in @nsub/nitxe (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in prettier-plugin-base (npm)
1 compromised version
- Jul 13, 2026
Malicious code in sysb1 (npm)
1 compromised version
- Jul 13, 2026
Malicious code in svg-fetcher (npm)
1 compromised version
- Jul 13, 2026
Malicious code in chai-log (npm)
1 compromised version
- Jul 13, 2026
Malicious code in @ica-gaming/slot-engine (npm)
1 compromised version
- Jul 13, 2026
Malicious code in frontend-regulations (npm)
1 compromised version
- Jul 13, 2026
Malicious code in notifications-broadcast (npm)
1 compromised version
- Jul 13, 2026
Malicious code in portway (npm)
1 compromised version
- Jul 13, 2026
Malicious code in sso-users-detection (npm)
1 compromised version
- Jul 13, 2026
Malicious code in path-addon-extend (npm)
3 compromised versions
Page 3 of 4,798