Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,011 total in npm · sorted newest first- Jun 18, 2026
Malicious code in oem-agentic-shared (npm)
1 compromised version
- Jun 18, 2026
Malicious code in datacamp-light (npm)
1 compromised version
- Jun 18, 2026
Malicious code in data-utils-bcf2 (npm)
1 compromised version
- Jun 18, 2026
Malicious code in stream-read-35cf (npm)
1 compromised version
- Jun 18, 2026
Malicious code in metrics-probe-88ad (npm)
- Jun 18, 2026
Malicious code in data-utils-d703 (npm)
1 compromised version
- Jun 18, 2026
Malicious code in type-check-816d (npm)
1 compromised version
- Jun 18, 2026
Malicious code in string-tools-be6c (npm)
1 compromised version
- Jun 18, 2026
Malicious code in metrics-probe-f256 (npm)
1 compromised version
- Jun 18, 2026
Malicious code in fmt-helpers-794b (npm)
1 compromised version
- Jun 18, 2026
Malicious code in color-utils-dee0 (npm)
1 compromised version
- Jun 18, 2026
Malware in metrics-probe-f256
1 compromised version
- Jun 18, 2026
Malware in metrics-probe-88ad
1 compromised version
- Jun 18, 2026
Malware in type-check-816d
1 compromised version
- Jun 18, 2026
Malware in color-utils-dee0
1 compromised version
- Jun 18, 2026
Malware in metrics-probe-77d4
1 compromised version
- Jun 18, 2026
Malware in string-tools-be6c
1 compromised version
- Jun 18, 2026
Malware in metrics-probe-64b2
1 compromised version
- Jun 18, 2026
Malware in metrics-pipeline-d8k2
1 compromised version
- Jun 18, 2026
Malware in runtime-metrics-w7k2
1 compromised version
- Jun 18, 2026
Malware in data-utils-d703
1 compromised version
- Jun 18, 2026
Malware in fmt-helpers-794b
1 compromised version
- Jun 18, 2026
Malware in metrics-probe-dc85
1 compromised version
- Jun 18, 2026
Malicious code in npm-sandbox-research-f1g2 (npm)
- Jun 18, 2026
Malicious code in npm-sandbox-research-a1b2 (npm)
- Jun 18, 2026
Malicious code in @ncurran/sandbox-recon-uac-4e7c (npm)
- Jun 18, 2026
Malicious code in @ncurran/sandbox-recon-sys-6a3f (npm)
- Jun 18, 2026
Malicious code in @ncurran/sandbox-recon-sys-5f1b (npm)
- Jun 18, 2026
Malicious code in @ncurran/sandbox-recon-sys-5b2c (npm)
- Jun 18, 2026
Malicious code in @ncurran/sandbox-recon-9b2d4f (npm)
- Jun 18, 2026
Malicious code in @ncurran/sandbox-recon-880538 (npm)
- Jun 18, 2026
Malicious code in @ncurran/sandbox-recon-7c4e1a (npm)
- Jun 18, 2026
Malicious code in @ncurran/dc-selftest-ba0ad4 (npm)
- Jun 18, 2026
Malicious code in @ncurran/dc-selftest-33afb7 (npm)
- Jun 18, 2026
Malware in npm-sandbox-ping-c8f2a
1 compromised version
- Jun 18, 2026
Malware in @ncurran/dc-selftest-ba0ad4
1 compromised version
- Jun 18, 2026
Malware in @ncurran/sandbox-recon-sys-5f1b
1 compromised version
- Jun 18, 2026
Malware in npm-sandbox-research-9c4e
1 compromised version
- Jun 18, 2026
Malware in npm-sandbox-research-d7e8
1 compromised version
- Jun 18, 2026
Malware in npm-sandbox-research-8b2f
1 compromised version
- Jun 18, 2026
Malware in @ncurran/sandbox-recon-sys-5b2c
1 compromised version
- Jun 18, 2026
Malware in npm-sandbox-ping-r9t2
1 compromised version
- Jun 18, 2026
Malware in npm-sandbox-research-g3h4
1 compromised version
- Jun 18, 2026
Malware in npm-sandbox-research-a1b2
1 compromised version
- Jun 18, 2026
Malware in postinstall-logger-7x9z
1 compromised version
- Jun 18, 2026
Malware in @ncurran/sandbox-recon-9b2d4f
1 compromised version
- Jun 18, 2026
Malware in @ncurran/sandbox-recon-sys-6a3f
1 compromised version
- Jun 18, 2026
Malware in @ncurran/sandbox-recon-uac-4e7c
1 compromised version
- Jun 18, 2026
Malware in @ncurran/sandbox-recon-880538
1 compromised version
- Jun 18, 2026
Malware in npm-sandbox-research-e9f0
1 compromised version
Page 39 of 4,801