Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,064 total in npm · sorted newest first- Jun 15, 2026
Malicious code in @wacrot/infra-data-kit (npm)
8 compromised versions
- Jun 15, 2026
Malicious code in tn-advertisement (npm)
1 compromised version
- Jun 15, 2026
Malicious code in postcss-minify-selector (npm)
12 compromised versions
- Jun 15, 2026
Malicious code in yunxin-overmind-comment (npm)
1 compromised version
- Jun 15, 2026
Malicious code in @intentsolution/database-security-scanner (npm)
1 compromised version
- Jun 15, 2026
Malicious code in index-ulid (npm)
3 compromised versions
- Jun 15, 2026
Malicious code in dms-backend (npm)
1 compromised version
- Jun 15, 2026
Malicious code in ogd-platform (npm)
1 compromised version
- Jun 15, 2026
Malicious code in vend-utilities (npm)
1 compromised version
- Jun 15, 2026
Malicious code in cardano-addresses-docs (npm)
1 compromised version
- Jun 15, 2026
Malicious code in @resolvx/core (npm)
3 compromised versions
- Jun 15, 2026
Malicious code in boardflow (npm)
8 compromised versions
- Jun 15, 2026
Malicious code in boardstep (npm)
9 compromised versions
- Jun 15, 2026
Malicious code in flow-lending (npm)
1 compromised version
- Jun 15, 2026
Malicious code in flow-lending-sdk (npm)
1 compromised version
- Jun 15, 2026
Malicious code in flowdefi (npm)
1 compromised version
- Jun 15, 2026
Malicious code in surf-lending (npm)
1 compromised version
- Jun 15, 2026
Malicious code in bodega-sdk (npm)
1 compromised version
- Jun 15, 2026
Malicious code in flowcardano (npm)
1 compromised version
- Jun 15, 2026
Malicious code in @solana-labs/ancor (npm)
6 compromised versions
- Jun 15, 2026
Malicious code in @solana-labs/spl-toke (npm)
8 compromised versions
- Jun 15, 2026
Malicious code in @solana-labs/web3js (npm)
6 compromised versions
- Jun 15, 2026
Malicious code in claude-cup (npm)
39 compromised versions
- Jun 15, 2026
Malicious code in mddriver (npm)
6 compromised versions
- Jun 15, 2026
Malicious code in neural-network-scan (npm)
4 compromised versions
- Jun 15, 2026
Malicious code in nativescript-swisspost-imagepicker (npm)
1 compromised version
- Jun 15, 2026
Malicious code in nativescript-swisspost-pcc-creative-editor (npm)
1 compromised version
- Jun 15, 2026
Malicious code in ldpbootstrap-jquery (npm)
14 compromised versions
- Jun 15, 2026
Malicious code in sam-package (npm)
19 compromised versions
- Jun 15, 2026
Malicious code in field-plus (npm)
2 compromised versions
- Jun 15, 2026
Malicious code in ing-feat-itsme-oidc-authentication (npm)
1 compromised version
- Jun 15, 2026
Malicious code in portal-backend (npm)
1 compromised version
- Jun 15, 2026
Malicious code in token-prices-cron (npm)
1 compromised version
- Jun 15, 2026
Malicious code in vaults-monitor-cron (npm)
1 compromised version
- Jun 15, 2026
Malicious code in hemi-supply-cron (npm)
1 compromised version
- Jun 15, 2026
Malicious code in hemi-earn-actions (npm)
1 compromised version
- Jun 15, 2026
Malicious code in vault-strategies (npm)
1 compromised version
- Jun 15, 2026
Malicious code in ve-hemi-rewards (npm)
1 compromised version
- Jun 15, 2026
Malicious code in unico-android (npm)
1 compromised version
- Jun 15, 2026
Malicious code in unicocheck-ios (npm)
1 compromised version
- Jun 15, 2026
Malicious code in unico-check (npm)
1 compromised version
- Jun 15, 2026
Malicious code in nic-datagov (npm)
1 compromised version
- Jun 15, 2026
Malicious code in um4r719-baileys (npm)
- Jun 15, 2026
Malware in um4r719-baileys
1 compromised version
- Jun 14, 2026
Malicious code in npx-whoami-demo (npm)
1 compromised version
- Jun 14, 2026
Malicious code in ltidiconf (npm)
1 compromised version
- Jun 14, 2026
Malicious code in npm-sandbox-research-e9f0 (npm)
1 compromised version
- Jun 14, 2026
Malicious code in npm-sandbox-ping-c8f2a (npm)
1 compromised version
- Jun 14, 2026
Malicious code in npm-sandbox-research-c5d6 (npm)
1 compromised version
- Jun 14, 2026
Malicious code in npm-sandbox-research-8b2f (npm)
1 compromised version
Page 50 of 4,802