Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,064 total in npm · sorted newest first- Jun 14, 2026
Malicious code in npm-sandbox-research-d7e8 (npm)
1 compromised version
- Jun 14, 2026
Malicious code in npm-sandbox-research-g3h4 (npm)
1 compromised version
- Jun 14, 2026
Malicious code in npm-sandbox-research-9c4e (npm)
1 compromised version
- Jun 14, 2026
Malicious code in sys-info-cli-app (npm)
3 compromised versions
- Jun 13, 2026
Malicious code in @gbrlxvi/ts-form-utils (npm)
14 compromised versions
- Jun 13, 2026
Malicious code in patientdocuments (npm)
1 compromised version
- Jun 13, 2026
Malicious code in mailconfirmer (npm)
47 compromised versions
- Jun 13, 2026
Malicious code in @giftyhq/widget-components (npm)
1 compromised version
- Jun 13, 2026
Malicious code in oh-my-ashclaw (npm)
1 compromised version
- Jun 13, 2026
Malicious code in chai-utils-test (npm)
6 compromised versions
- Jun 13, 2026
Malicious code in @achuthvp/postinstall-poc (npm)
4 compromised versions
- Jun 13, 2026
Malicious code in 2fa-exe (npm)
2 compromised versions
- Jun 13, 2026
Malicious code in environment-gate (npm)
2 compromised versions
- Jun 13, 2026
Malicious code in oa-crm-webapi (npm)
1 compromised version
- Jun 13, 2026
Malicious code in axl-ui (npm)
1 compromised version
- Jun 13, 2026
Malicious code in xy-shared (npm)
1 compromised version
- Jun 13, 2026
Malicious code in loadninja-shared (npm)
1 compromised version
- Jun 13, 2026
Malicious code in easy-time666 (npm)
1 compromised version
- Jun 13, 2026
Malicious code in sheratan_haha (npm)
2 compromised versions
- Jun 13, 2026
Malicious code in postcss-minify-selector-parser (npm)
9 compromised versions
- Jun 13, 2026
Malicious code in postinstall-logger-7x9z (npm)
1 compromised version
- Jun 13, 2026
Malicious code in class-synth (npm)
10 compromised versions
- Jun 13, 2026
Malicious code in node-multi-downloader (npm)
1 compromised version
- Jun 13, 2026
Malicious code in node-denv (npm)
1 compromised version
- Jun 13, 2026
Malicious code in node-stack-frames (npm)
1 compromised version
- Jun 13, 2026
Malicious code in node-app-doctor (npm)
3 compromised versions
- Jun 13, 2026
Malicious code in houzidawang807 (npm)
1 compromised version
- Jun 13, 2026
Malicious code in houzidawang808 (npm)
1 compromised version
- Jun 13, 2026
Malicious code in houzidawang806 (npm)
23 compromised versions
- Jun 13, 2026
Malicious code in ecto_module (npm)
1 compromised version
- Jun 13, 2026
Malicious code in vite-config-react (npm)
1 compromised version
- Jun 13, 2026
Malicious code in vite-config-optimizer (npm)
1 compromised version
- Jun 13, 2026
Malicious code in @ci-lifecycle-test/postinstall-ping (npm)
1 compromised version
- Jun 13, 2026
Malicious code in warp-dependency (npm)
2 compromised versions
- Jun 12, 2026
Malicious code in ect-472839-ctf (npm)
1 compromised version
- Jun 12, 2026
Malicious code in ect-654321 (npm)
7 compromised versions
- Jun 12, 2026
Malicious code in ect-839201 (npm)
11 compromised versions
- Jun 12, 2026
Malicious code in ect-839201-ctf (npm)
1 compromised version
- Jun 12, 2026
Malicious code in claudechor (npm)
5 compromised versions
- Jun 12, 2026
Malicious code in beamz (npm)
6 compromised versions
- Jun 12, 2026
Malicious code in chalk-plus-js (npm)
1 compromised version
- Jun 12, 2026
Malicious code in chalk-pro (npm)
2 compromised versions
- Jun 12, 2026
Malicious code in jextic-eclib (npm)
1 compromised version
- Jun 12, 2026
Malicious code in chalk-plus-ts (npm)
2 compromised versions
- Jun 12, 2026
Malicious code in vite-plugin-logo (npm)
9 compromised versions
- Jun 12, 2026
Malicious code in workflow-postgres-setup (npm)
1 compromised version
- Jun 12, 2026
Malicious code in vite-plugin-compress-js (npm)
3 compromised versions
- Jun 12, 2026
Malicious code in vite-svgr (npm)
2 compromised versions
- Jun 12, 2026
Malicious code in friendly-greeter-demo (npm)
11 compromised versions
- Jun 12, 2026
Malicious code in theta-connector (npm)
1 compromised version
Page 51 of 4,802