Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,064 total in npm · sorted newest first- Jun 11, 2026
Malicious code in polymarket-clob-api (npm)
- Jun 11, 2026
Malware in polymarket-clob-api
1 compromised version
- Jun 11, 2026
Malware in tailwind-dark-mode-kit
1 compromised version
- Jun 11, 2026
Malicious code in emittery_styled (npm)
- Jun 11, 2026
Malware in emittery_styled
1 compromised version
- Jun 11, 2026
Malware in rsflows-pexml
1 compromised version
- Jun 11, 2026
Malware in google-cloud-secret-manager-config-poc
1 compromised version
- Jun 11, 2026
Malware in paypal-payouts-bridge
1 compromised version
- Jun 11, 2026
Malware in apple-mycelium-fix
1 compromised version
- Jun 11, 2026
Malicious code in justgetit (npm)
- Jun 11, 2026
Malware in justgetit
1 compromised version
- Jun 11, 2026
Malicious code in @403name/electron-buidler (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in @403name/fsevent (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in @403name/ether-js (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in solana-dev-tools (npm)
1 compromised version
- Jun 11, 2026
Malicious code in sensivity (npm)
70 compromised versions
- Jun 11, 2026
Malicious code in solana-web3-community (npm)
3 compromised versions
- Jun 11, 2026
Malicious code in janus-flow (npm)
1 compromised version
- Jun 11, 2026
Malicious code in janus-ft (npm)
1 compromised version
- Jun 11, 2026
Malicious code in @my_name_is_khn/express-security-tool-v1 (npm)
1 compromised version
- Jun 11, 2026
Malicious code in @my_name_is_khn/express-security-tool-v3 (npm)
1 compromised version
- Jun 11, 2026
Malicious code in @my_name_is_khn/express-security-tool (npm)
1 compromised version
- Jun 11, 2026
Malicious code in express-timer (npm)
6 compromised versions
- Jun 11, 2026
Malicious code in express-self-destruct2 (npm)
1 compromised version
- Jun 11, 2026
Malicious code in express-self-destruct (npm)
1 compromised version
- Jun 11, 2026
Malicious code in india-map-react (npm)
3 compromised versions
- Jun 11, 2026
Malicious code in @w2d/web-components (npm)
1 compromised version
- Jun 11, 2026
Malicious code in jailbreak-code (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in pocteszep (npm)
7 compromised versions
- Jun 11, 2026
Malicious code in @monitoring-lib/error-tracking (npm)
1 compromised version
- Jun 11, 2026
Malicious code in mermaid-v11 (npm)
3 compromised versions
- Jun 11, 2026
Malicious code in @common-stack/generate-plugin (npm)
15 compromised versions
- Jun 11, 2026
Malware in @common-stack/generate-plugin
1 compromised version
- Jun 11, 2026
Malicious code in @entos-ems/xerxes-client-js (npm)
1 compromised version
- Jun 11, 2026
Malicious code in hex-type (npm)
1 compromised version
- Jun 10, 2026
Malicious code in zer0onedate (npm)
2 compromised versions
- Jun 10, 2026
Malicious code in zer0onedatetool (npm)
1 compromised version
- Jun 10, 2026
Malicious code in @thomlecter1122/lab-helper-test (npm)
6 compromised versions
- Jun 10, 2026
Malicious code in @coze-common/chat-area (npm)
1 compromised version
- Jun 10, 2026
Malicious code in chai-check-error (npm)
5 compromised versions
- Jun 10, 2026
Malicious code in check-error-util (npm)
6 compromised versions
- Jun 10, 2026
Malicious code in websocket-slot (npm)
1 compromised version
- Jun 10, 2026
Malicious code in @solana-labs/web3.js (npm)
6 compromised versions
- Jun 10, 2026
Malicious code in v018-axios-cdntest (npm)
4 compromised versions
- Jun 10, 2026
Malicious code in @access-risk/browser-remedy-react (npm)
2 compromised versions
- Jun 10, 2026
Malicious code in @helpcentre/tesco-help (npm)
1 compromised version
- Jun 10, 2026
Malicious code in @orion-design-system/foundation (npm)
5 compromised versions
- Jun 10, 2026
Malicious code in @orion-design-system/components (npm)
4 compromised versions
- Jun 10, 2026
Malicious code in @orion-design-system/store (npm)
3 compromised versions
- Jun 10, 2026
Malicious code in events-runtime (npm)
6 compromised versions
Page 56 of 4,802