Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,064 total in npm · sorted newest first- Jun 11, 2026
Malware in zatzdbai
1 compromised version
- Jun 11, 2026
Malware in hex-type
1 compromised version
- Jun 11, 2026
Malicious code in @visma-net-platform/module-navigator (npm)
1 compromised version
- Jun 11, 2026
Malicious code in @tribe-digital/shopify-starter-theme (npm)
1 compromised version
- Jun 11, 2026
Malicious code in @tenforce/toolbox-fontmap (npm)
1 compromised version
- Jun 11, 2026
Malicious code in @snowsight/debug-tooling (npm)
1 compromised version
- Jun 11, 2026
Malicious code in @sazka/web (npm)
- Jun 11, 2026
Malicious code in @ntnx/nx-react-components (npm)
- Jun 11, 2026
Malicious code in @ngt-frontend/widgets-core (npm)
- Jun 11, 2026
Malicious code in @marketplace-shared/components (npm)
1 compromised version
- Jun 11, 2026
Malicious code in @iobeya/spa-auth (npm)
- Jun 11, 2026
Malicious code in @integrations-center/utils (npm)
- Jun 11, 2026
Malicious code in @hatcha-captcha/core (npm)
1 compromised version
- Jun 11, 2026
Malicious code in @coterie-baby/common (npm)
- Jun 11, 2026
Malware in @serviceshub/x-web-core
1 compromised version
- Jun 11, 2026
Malware in @ngt-frontend/widgets-core
1 compromised version
- Jun 11, 2026
Malware in @integrations-center/utils
1 compromised version
- Jun 11, 2026
Malware in @coterie-baby/common
1 compromised version
- Jun 11, 2026
Malware in @vtmn-play/react
1 compromised version
- Jun 11, 2026
Malware in @ntnx/nx-react-components
1 compromised version
- Jun 11, 2026
Malware in @visma-net-platform/module-navigator
1 compromised version
- Jun 11, 2026
Malware in @web-3d-tool/sdk
1 compromised version
- Jun 11, 2026
Malware in @iobeya/spa-auth
1 compromised version
- Jun 11, 2026
Malware in @vivaux/telemetry
1 compromised version
- Jun 11, 2026
Malware in @snowsight/debug-tooling
1 compromised version
- Jun 11, 2026
Malware in @tribe-digital/shopify-starter-theme
1 compromised version
- Jun 11, 2026
Malware in @sazka/web
1 compromised version
- Jun 11, 2026
Malware in @marketplace-shared/components
1 compromised version
- Jun 11, 2026
Malware in @tenforce/toolbox-fontmap
1 compromised version
- Jun 11, 2026
Malware in @hatcha-captcha/core
1 compromised version
- Jun 11, 2026
Malware in @trackking/core
1 compromised version
- Jun 11, 2026
Malicious code in sitecore-mm-component-style (npm)
1 compromised version
- Jun 11, 2026
Malicious code in pui-diagnostics (npm)
1 compromised version
- Jun 11, 2026
Malicious code in mm-ts-utils-client (npm)
- Jun 11, 2026
Malicious code in fed-callnative (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in experian-analytics-components (npm)
1 compromised version
- Jun 11, 2026
Malware in mm-ts-utils-client
1 compromised version
- Jun 11, 2026
Malware in experian-analytics-components
1 compromised version
- Jun 11, 2026
Malware in sitecore-mm-component-style
1 compromised version
- Jun 11, 2026
Malware in archetype-style
1 compromised version
- Jun 11, 2026
Malware in fed-callnative
1 compromised version
- Jun 11, 2026
Malware in pui-diagnostics
1 compromised version
- Jun 11, 2026
Malicious code in pc-optimizer (npm)
3 compromised versions
- Jun 11, 2026
Malicious code in unified-ui-components-library (npm)
3 compromised versions
- Jun 11, 2026
Malicious code in ts-ecro (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in optional-cpu-features (npm)
1 compromised version
- Jun 11, 2026
Malicious code in self-certificate (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in goreleaser-run (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in parket-slot (npm)
1 compromised version
- Jun 11, 2026
Malicious code in ecto-corsair-whisper-6f3b9 (npm)
26 compromised versions
Page 53 of 4,802