Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,064 total in npm · sorted newest first- Jun 10, 2026
Malware in @validator-sdk/pubkey
1 compromised version
- Jun 10, 2026
Malware in @validate-ethereum-address/core
1 compromised version
- Jun 10, 2026
Malicious code in @solana-launchpad/sdk (npm)
14 compromised versions
- Jun 10, 2026
Malicious code in @meme-sdk/trade (npm)
2 compromised versions
- Jun 10, 2026
Malware in @meme-sdk/trade
1 compromised version
- Jun 10, 2026
Malware in @solana-launchpad/sdk
1 compromised version
- Jun 10, 2026
Malicious code in @validate-sdk/v2 (npm)
20 compromised versions
- Jun 10, 2026
Malware in @validate-sdk/v2
1 compromised version
- Jun 10, 2026
Malicious code in ethers-jss (npm)
1 compromised version
- Jun 10, 2026
Malicious code in coinbase-wallet-utils (npm)
- Jun 10, 2026
Malware in ethers-jss
1 compromised version
- Jun 10, 2026
Malware in coinbase-wallet-utils
1 compromised version
- Jun 10, 2026
Malicious code in csc154-internall-depend (npm)
- Jun 10, 2026
Malware in csc154-internall-depend
1 compromised version
- Jun 10, 2026
Malicious code in @builder.io/dev-tools (npm)
1 compromised version
- Jun 10, 2026
Malware in @builder.io/dev-tools
1 compromised version
- Jun 10, 2026
Malicious code in xnder-wrapper-module (npm)
3 compromised versions
- Jun 10, 2026
Malicious code in xnder-sdk (npm)
2 compromised versions
- Jun 10, 2026
Malware in xnder-wrapper-module
1 compromised version
- Jun 10, 2026
Malware in xnder-sdk
1 compromised version
- Jun 9, 2026
Malicious code in sb-original (npm)
1 compromised version
- Jun 9, 2026
Malicious code in react-pinojs (npm)
1 compromised version
- Jun 9, 2026
Malicious code in menu-filter-widget-web (npm)
1 compromised version
- Jun 9, 2026
Malicious code in mcp-server-git (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in mcp-server-fetch (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in mcp-server-postgres (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in mcp-server-redis (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in mcp-server-sequential-thinking (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in mcp-server-figma (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in mcp-server-notion (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in mcp-server-sentry (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in mcp-server-github (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in mcp-server-supabase (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in getd-eslint-rules (npm)
1 compromised version
- Jun 9, 2026
Malicious code in getd-pantallas-cliente (npm)
1 compromised version
- Jun 9, 2026
Malicious code in getd-typescript-eslint-rules (npm)
1 compromised version
- Jun 9, 2026
Malicious code in gethandler-api (npm)
1 compromised version
- Jun 9, 2026
Malicious code in getd-transactional-web (npm)
1 compromised version
- Jun 9, 2026
Malicious code in getd-handler-api (npm)
1 compromised version
- Jun 9, 2026
Malicious code in getd-ui-library (npm)
1 compromised version
- Jun 9, 2026
Malicious code in getui-library (npm)
1 compromised version
- Jun 9, 2026
Malicious code in getd-content-management (npm)
1 compromised version
- Jun 9, 2026
Malicious code in getd-web-corporativa (npm)
1 compromised version
- Jun 9, 2026
Malicious code in @rockawayx/utils (npm)
1 compromised version
- Jun 9, 2026
Malicious code in ipy-rev-proxy (npm)
1 compromised version
- Jun 9, 2026
Malicious code in db-xorma (npm)
6 compromised versions
- Jun 9, 2026
Malicious code in db-dx-connector (npm)
4 compromised versions
- Jun 9, 2026
Malicious code in tailwind-form (npm)
1 compromised version
- Jun 9, 2026
Malicious code in fhirproxy-utils (npm)
1 compromised version
- Jun 9, 2026
Malicious code in fhirproxy (npm)
1 compromised version
Page 58 of 4,802