Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,003 total in npm · sorted newest first- Jun 29, 2026
Malicious code in @digitalcnzz/commonmodule (npm)
- Jun 28, 2026
Malicious code in lc-chatbot (npm)
1 compromised version
- Jun 28, 2026
Malicious code in polymarket-clob-math (npm)
1 compromised version
- Jun 28, 2026
Malicious code in livekit-agents (npm)
10 compromised versions
- Jun 28, 2026
Malicious code in @k18n/creatormarketplace-admin-language (npm)
3 compromised versions
- Jun 28, 2026
Malicious code in insomnia-test-util-m4gester (npm)
2 compromised versions
- Jun 28, 2026
Malicious code in insomnia-plugin-poc-m4gester (npm)
1 compromised version
- Jun 28, 2026
Malicious code in insomnia-plugin-poc-m4gester2 (npm)
2 compromised versions
- Jun 28, 2026
Malicious code in anthropic-internal-tools (npm)
3 compromised versions
- Jun 27, 2026
Malicious code in ts-ankle (npm)
1 compromised version
- Jun 27, 2026
Malicious code in ryan-pdf-js (npm)
1 compromised version
- Jun 27, 2026
Malicious code in react-editable-calendar (npm)
7 compromised versions
- Jun 27, 2026
Malicious code in crossmint-wallets-sdk (npm)
1 compromised version
- Jun 27, 2026
Malicious code in chai-as-persisted (npm)
2 compromised versions
- Jun 26, 2026
Malicious code in @osmura/treeify (npm)
3 compromised versions
- Jun 26, 2026
Malicious code in express-initial (npm)
4 compromised versions
- Jun 26, 2026
Malicious code in db-query-log (npm)
2 compromised versions
- Jun 26, 2026
Malicious code in db-rake (npm)
2 compromised versions
- Jun 26, 2026
Malicious code in db-plog (npm)
2 compromised versions
- Jun 26, 2026
Malicious code in @krentzen/buffer-reverse (npm)
1 compromised version
- Jun 26, 2026
Malicious code in gptmini (npm)
2 compromised versions
- Jun 26, 2026
Malicious code in disksweep (npm)
2 compromised versions
- Jun 26, 2026
Malicious code in @appupdate/cdn-sync (npm)
3 compromised versions
- Jun 26, 2026
Malicious code in react-dynamic-table-compenent (npm)
1 compromised version
- Jun 26, 2026
Malicious code in chai-as-assured (npm)
2 compromised versions
- Jun 26, 2026
Malicious code in xrblocks-remote-control (npm)
1 compromised version
- Jun 26, 2026
Malicious code in react-dynammic-table-component (npm)
1 compromised version
- Jun 26, 2026
Malicious code in @immobiliarelabs/backstage-plugin-gitlab-backend (npm)
5 compromised versions
- Jun 26, 2026
Malicious code in @immobiliarelabs/backstage-plugin-ldap-auth-backend (npm)
5 compromised versions
- Jun 26, 2026
Malicious code in @immobiliarelabs/backstage-plugin-ldap-auth (npm)
5 compromised versions
- Jun 26, 2026
Malicious code in @immobiliarelabs/backstage-plugin-gitlab (npm)
7 compromised versions
- Jun 26, 2026
Malicious code in @carvana.authentication-flows/shared (npm)
1 compromised version
- Jun 26, 2026
Malicious code in express-plugin (npm)
1 compromised version
- Jun 26, 2026
Malicious code in ts-einkle (npm)
4 compromised versions
- Jun 26, 2026
Malicious code in ts-einkle-slot (npm)
5 compromised versions
- Jun 26, 2026
Malicious code in @epsteinlovekids483/crossmint-wallets-sdk-pentest (npm)
8 compromised versions
- Jun 26, 2026
Malicious code in rollup-plugin-polyfill-connect (npm)
- Jun 26, 2026
Malicious code in react-icon-svgs (npm)
- Jun 26, 2026
Malicious code in ai-node-relay (npm)
2 compromised versions
- Jun 26, 2026
Malicious code in ai-node-agent (npm)
3 compromised versions
- Jun 26, 2026
Malicious code in dtxto1ols (npm)
1 compromised version
- Jun 26, 2026
Malicious code in dtxtools (npm)
2 compromised versions
- Jun 26, 2026
Malicious code in @merceas/cross-fetch (npm)
1 compromised version
- Jun 26, 2026
Malicious code in @merceas/anchor (npm)
2 compromised versions
- Jun 26, 2026
Malicious code in react-context-form-tdsss (npm)
1 compromised version
- Jun 26, 2026
Malicious code in tw-style-utils (npm)
2 compromised versions
- Jun 26, 2026
Malicious code in pump-stream-logger (npm)
1 compromised version
- Jun 26, 2026
Malicious code in pump-laserstream-parser (npm)
1 compromised version
- Jun 26, 2026
Malicious code in pino-zod (npm)
2 compromised versions
- Jun 26, 2026
Malicious code in hydanlabs (npm)
4 compromised versions
Page 31 of 4,801