Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,064 total in npm · sorted newest first- Jun 11, 2026
Malicious code in chai-dec (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo9 (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo8 (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo6 (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-multi-mq (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-multi-q (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo3 (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo4 (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo2 (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo6x (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo10x (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo7x (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-ivo (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo8x (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo1 (npm)
3 compromised versions
- Jun 11, 2026
Malicious code in 0x2ai-demo9x (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-zoe (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in backup-my-data (npm)
3 compromised versions
- Jun 11, 2026
Malicious code in clean-my-pc (npm)
6 compromised versions
- Jun 11, 2026
Malicious code in sysbu (npm)
3 compromised versions
- Jun 11, 2026
Malicious code in sysau (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in sysnu (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in coderzero (npm)
5 compromised versions
- Jun 11, 2026
Malicious code in gpt-sdk (npm)
9 compromised versions
- Jun 11, 2026
Malicious code in telebot-server (npm)
1 compromised version
- Jun 11, 2026
Malicious code in twilio-sdk (npm)
9 compromised versions
- Jun 11, 2026
Malware in crypto-javascript
1 compromised version
- Jun 11, 2026
Malicious code in vite-tsconfig (npm)
3 compromised versions
- Jun 11, 2026
Malicious code in ai-sdk-helpers (npm)
25 compromised versions
- Jun 11, 2026
Malicious code in fastify-addon (npm)
1 compromised version
- Jun 11, 2026
Malicious code in web-pool (npm)
1 compromised version
- Jun 11, 2026
Malicious code in sendgrid-sdk (npm)
9 compromised versions
- Jun 11, 2026
Malicious code in webpack-cache-cycle (npm)
1 compromised version
- Jun 11, 2026
Malicious code in webpack-patch (npm)
4 compromised versions
- Jun 11, 2026
Malicious code in webpack-cache-reset (npm)
1 compromised version
- Jun 11, 2026
Malicious code in webpack-cache-clean (npm)
1 compromised version
- Jun 11, 2026
Malicious code in wp-env (npm)
1 compromised version
- Jun 11, 2026
Malicious code in @bestlzk/sectest (npm)
1 compromised version
- Jun 11, 2026
Malicious code in @tonsdk/core (npm)
1 compromised version
- Jun 11, 2026
Malicious code in js-crypto-promise (npm)
1 compromised version
- Jun 11, 2026
Malicious code in @sentry-internal-sdk/profiling-node (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in forge-jsx2 (npm)
4 compromised versions
- Jun 11, 2026
Malicious code in nim-submit-for-test (npm)
1 compromised version
- Jun 11, 2026
Malicious code in @koadz/sso (npm)
1 compromised version
- Jun 11, 2026
Malicious code in field-upload-tool (npm)
1 compromised version
- Jun 11, 2026
Malicious code in solana-rpc-pool (npm)
1 compromised version
- Jun 11, 2026
Malicious code in spotify-url-resolver (npm)
1 compromised version
- Jun 11, 2026
Malicious code in testzapier (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in qa-handoff (npm)
1 compromised version
- Jun 11, 2026
Malicious code in tailwind-dark-mode-kit (npm)
Page 55 of 4,802