Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Oct 23, 2026
Malicious code in @grabcad/grabcad-shop-shared (npm)
7 compromised versions
- Oct 23, 2026
Malicious code in @grabcad/company-server-shared (npm)
8 compromised versions
- Oct 23, 2026
Malware in @ecg-internal/adobe-dmp-js
1 compromised version
- Oct 23, 2026
Malware in @ecg-internal/reviews-dialog-ui
1 compromised version
- Oct 23, 2026
Malware in @grabcad/preferences-client
1 compromised version
- Oct 23, 2026
Malware in @ecg-internal/media-util-js-lib
1 compromised version
- Oct 23, 2026
Malware in @ecg-internal/favourites-ui
1 compromised version
- Oct 23, 2026
Malware in @grabcad/company-server-shared
1 compromised version
- Oct 23, 2026
Malware in @grabcad/grabcad-shop-shared
1 compromised version
- Oct 23, 2026
Malware in @ecg-internal/aurora-js-formatters
1 compromised version
- Oct 23, 2026
Malware in @grabcad/user-license
1 compromised version
- Oct 23, 2026
Malicious code in @cecm-web-sdk/core (npm)
4 compromised versions
- Oct 23, 2026
Malicious code in @blueskydataplatform/shared-ui (npm)
6 compromised versions
- Oct 23, 2026
Malware in @cecm-web-sdk/core
1 compromised version
- Oct 23, 2026
Malware in @blueskydataplatform/shared-ui
1 compromised version
- Oct 23, 2026
Malware in @ecg-internal/js-react-i18n
1 compromised version
- Oct 23, 2026
Malware in @kibt/www-nuxt-i18n
1 compromised version
- Oct 23, 2026
Malicious code in @ecg-internal/js-react-i18n (npm)
5 compromised versions
- Oct 23, 2026
Malicious code in @ecg-internal/aurora-js-formatters (npm)
5 compromised versions
- Oct 23, 2026
Malicious code in @ecg-internal/media-util-js-lib (npm)
7 compromised versions
- Oct 23, 2026
Malicious code in @ecg-internal/favourites-ui (npm)
7 compromised versions
- Oct 23, 2026
Malicious code in @ecg-internal/adobe-dmp-js (npm)
5 compromised versions
- Oct 23, 2026
Malicious code in @ecg-internal/reviews-dialog-ui (npm)
7 compromised versions
- Oct 23, 2026
Malicious code in @tekmidian/pai (npm)
3 compromised versions
- Oct 23, 2026
Malware in @tekmidian/pai
1 compromised version
- Oct 22, 2026
Malicious code in react-native-bright-sdk (npm)
1 compromised version
- Oct 22, 2026
Malicious code in @factiii/runner (npm)
3 compromised versions
- Oct 22, 2026
Malware in @factiii/runner
1 compromised version
- Oct 22, 2026
Malicious code in @seggy116/next-diff (npm)
1 compromised version
- Oct 22, 2026
Malware in @seggy116/next-diff
1 compromised version
- Oct 22, 2026
Malicious code in @pkgship/frps-linux-amd64 (npm)
1 compromised version
- Oct 22, 2026
Malware in @pkgship/frps-linux-amd64
1 compromised version
- Oct 22, 2026
Malicious code in @pkgship/frpc-linux-amd64 (npm)
1 compromised version
- Oct 22, 2026
Malware in @pkgship/frpc-linux-amd64
1 compromised version
- Oct 22, 2026
Malicious code in sdk-utils-testmetest (npm)
- Oct 22, 2026
Malicious code in kvarzo8f3atestmetest (npm)
- Oct 22, 2026
Malware in sdk-utils-testmetest
1 compromised version
- Oct 22, 2026
Malware in kvarzo8f3atestmetest
1 compromised version
- Oct 22, 2026
Malicious code in @lumen-labs-dev/whisper-node (npm)
1 compromised version
- Oct 22, 2026
Malware in @lumen-labs-dev/whisper-node
1 compromised version
- Oct 22, 2026
Malicious code in darknode-cli (npm)
3 compromised versions
- Oct 22, 2026
Malware in darknode-cli
1 compromised version
- Oct 22, 2026
Malicious code in x402-prompt-injection-scan (npm)
1 compromised version
- Oct 22, 2026
Malware in x402-prompt-injection-scan
1 compromised version
- Oct 22, 2026
Malicious code in imgdecode (npm)
3 compromised versions
- Oct 22, 2026
Malware in imgdecode
1 compromised version
- Oct 22, 2026
Malicious code in @liauto/darwin-x64 (npm)
1 compromised version
- Oct 22, 2026
Malware in @liauto/darwin-x64
1 compromised version
- Oct 22, 2026
Malicious code in @pkgship/frpc-darwin-amd64 (npm)
1 compromised version
- Oct 22, 2026
Malware in @pkgship/frpc-darwin-amd64
1 compromised version
Page 5 of 6,634