Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,011 total in npm · sorted newest first- Jun 23, 2026
Malicious code in theme-color-picker (npm)
3 compromised versions
- Jun 23, 2026
Malicious code in chai-as-operated (npm)
1 compromised version
- Jun 23, 2026
Malicious code in markdownlint-cli2-fix (npm)
2 compromised versions
- Jun 23, 2026
Malicious code in buffer-wrap-67d7 (npm)
1 compromised version
- Jun 23, 2026
Malicious code in hex-conv-ae7a (npm)
1 compromised version
- Jun 23, 2026
Malicious code in safe-json-38bd (npm)
1 compromised version
- Jun 23, 2026
Malicious code in wagmi_util (npm)
1 compromised version
- Jun 23, 2026
Malicious code in log-taker (npm)
1 compromised version
- Jun 23, 2026
Malicious code in react-check-error (npm)
2 compromised versions
- Jun 23, 2026
Malicious code in triage-bot (npm)
2 compromised versions
- Jun 23, 2026
Malicious code in therdweb (npm)
1 compromised version
- Jun 23, 2026
Malicious code in thidweb (npm)
1 compromised version
- Jun 23, 2026
Malicious code in thurdweb (npm)
1 compromised version
- Jun 23, 2026
Malicious code in rainbownkit (npm)
1 compromised version
- Jun 23, 2026
Malicious code in thirdwebjs (npm)
1 compromised version
- Jun 23, 2026
Malicious code in rainbokit (npm)
1 compromised version
- Jun 23, 2026
Malicious code in hunsterx-package (npm)
1 compromised version
- Jun 23, 2026
Malicious code in @zynkit/probe (npm)
1 compromised version
- Jun 23, 2026
Malicious code in @frostnode/probe (npm)
1 compromised version
- Jun 23, 2026
Malicious code in @gleamkit/probe (npm)
1 compromised version
- Jun 23, 2026
Malicious code in ts-grok (npm)
1 compromised version
- Jun 23, 2026
Malicious code in ts-escrow (npm)
1 compromised version
- Jun 23, 2026
Malicious code in ts-bn-lint-helper (npm)
1 compromised version
- Jun 23, 2026
Malicious code in ts-bn-lint (npm)
2 compromised versions
- Jun 23, 2026
Malicious code in ts-escro (npm)
2 compromised versions
- Jun 23, 2026
Malicious code in @muaththir/api (npm)
1 compromised version
- Jun 23, 2026
Malicious code in ts-biginteger-lib (npm)
1 compromised version
- Jun 23, 2026
Malicious code in cursorai-agent (npm)
1 compromised version
- Jun 23, 2026
Malicious code in @ravespaceio/rave-engine (npm)
- Jun 23, 2026
Malicious code in @ravespaceio/browser-input (npm)
- Jun 23, 2026
Malicious code in web3-crypto-address-utils (npm)
1 compromised version
- Jun 23, 2026
Malicious code in web3-eth-util (npm)
1 compromised version
- Jun 23, 2026
Malicious code in web3-eth-utils (npm)
1 compromised version
- Jun 23, 2026
Malicious code in calculate-helper (npm)
- Jun 23, 2026
Malicious code in sync-external (npm)
3 compromised versions
- Jun 23, 2026
Malicious code in server-parket (npm)
5 compromised versions
- Jun 23, 2026
Malicious code in mjs-eslint-service (npm)
1 compromised version
- Jun 23, 2026
Malicious code in ts-sudo (npm)
1 compromised version
- Jun 23, 2026
Malicious code in parket-flow (npm)
1 compromised version
- Jun 23, 2026
Malicious code in ts-predict-helper (npm)
2 compromised versions
- Jun 23, 2026
Malicious code in ts-arithmetic-helper (npm)
1 compromised version
- Jun 23, 2026
Malicious code in chalk-ultra (npm)
3 compromised versions
- Jun 23, 2026
Malicious code in analysis-chart (npm)
21 compromised versions
- Jun 23, 2026
Malicious code in hashd-edu (npm)
5 compromised versions
- Jun 23, 2026
Malicious code in date-format-helper2 (npm)
7 compromised versions
- Jun 23, 2026
Malicious code in react-simple-utils-kit (npm)
18 compromised versions
- Jun 23, 2026
Malicious code in @outmarket/utils (npm)
3 compromised versions
- Jun 23, 2026
Malicious code in @outmarket/ui (npm)
1 compromised version
- Jun 23, 2026
Malicious code in airbnb-airlock (npm)
1 compromised version
- Jun 23, 2026
Malicious code in ttal2ttml (npm)
4 compromised versions
Page 35 of 4,801