Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,691 total in npm · sorted newest first- Oct 22, 2026
Malicious code in @pkgship/frpc-darwin-amd64 (npm)
1 compromised version
- Oct 22, 2026
Malware in @pkgship/frpc-darwin-amd64
1 compromised version
- Oct 22, 2026
Malicious code in opencode-skills-collection (npm)
21 compromised versions
- Oct 22, 2026
Malware in opencode-skills-collection
1 compromised version
- Oct 22, 2026
Malicious code in agentic-awesome-skills (npm)
20 compromised versions
- Oct 22, 2026
Malware in agentic-awesome-skills
1 compromised version
- Oct 22, 2026
Malware in @sudobility/indexer_client
1 compromised version
- Oct 22, 2026
Malware in @sudobility/shaperouter_client
1 compromised version
- Oct 22, 2026
Malware in @sudobility/wildduck_client
1 compromised version
- Oct 22, 2026
Malware in @sudobility/testomniac_client
1 compromised version
- Oct 22, 2026
Malicious code in @conduitops/logview-archive (npm)
1 compromised version
- Oct 22, 2026
Malicious code in simplewave (npm)
1 compromised version
- Oct 22, 2026
Malicious code in net-codec-testmetest (npm)
1 compromised version
- Oct 22, 2026
Malicious code in log-rotate-testmetest (npm)
1 compromised version
- Oct 22, 2026
Malicious code in formatting-subtitles (npm)
1 compromised version
- Oct 22, 2026
Malicious code in test-brotli-testmetest (npm)
1 compromised version
- Oct 22, 2026
Malicious code in log-sink-testmetest (npm)
1 compromised version
- Oct 22, 2026
Malicious code in test-brotli2-testmetest (npm)
1 compromised version
- Oct 22, 2026
Malicious code in data-pipeline-testmetest (npm)
1 compromised version
- Oct 22, 2026
Malicious code in pixel-map-testmetest (npm)
1 compromised version
- Oct 22, 2026
Malicious code in event-emitter-testmetest (npm)
1 compromised version
- Oct 22, 2026
Malicious code in net-codec-testmetest (npm)
1 compromised version
- Oct 22, 2026
Malicious code in log-rotate-testmetest (npm)
1 compromised version
- Oct 22, 2026
Malicious code in formatting-subtitles (npm)
1 compromised version
- Oct 22, 2026
Malicious code in @conduitops/logview-archive (npm)
1 compromised version
- Oct 22, 2026
Malicious code in simplewave (npm)
1 compromised version
- Oct 22, 2026
Malicious code in @sudobility/wildduck_client (npm)
1 compromised version
- Oct 22, 2026
Malicious code in @sudobility/shaperouter_client (npm)
1 compromised version
- Oct 22, 2026
Malicious code in @sudobility/testomniac_client (npm)
1 compromised version
- Oct 22, 2026
Malicious code in @sudobility/indexer_client (npm)
1 compromised version
- Oct 21, 2026
Malicious code in @sudobility/testomniac_client (npm)
1 compromised version
- Oct 21, 2026
Malicious code in @sudobility/indexer_client (npm)
1 compromised version
- Oct 21, 2026
Malicious code in @sudobility/wildduck_client (npm)
1 compromised version
- Oct 21, 2026
Malicious code in @sudobility/shaperouter_client (npm)
1 compromised version
- Oct 21, 2026
Malicious code in @worrisome/aaaa (npm)
- Oct 21, 2026
Malware in @worrisome/aaaa
1 compromised version
- Oct 21, 2026
Malware in @worrisome/reutil
1 compromised version
- Oct 21, 2026
Malicious code in test-brotli2-testmetest (npm)
1 compromised version
- Oct 21, 2026
Malicious code in test-brotli-testmetest (npm)
1 compromised version
- Oct 21, 2026
Malicious code in pixel-map-testmetest (npm)
3 compromised versions
- Oct 21, 2026
Malicious code in log-sink-testmetest (npm)
1 compromised version
- Oct 21, 2026
Malicious code in event-emitter-testmetest (npm)
4 compromised versions
- Oct 21, 2026
Malicious code in data-pipeline-testmetest (npm)
1 compromised version
- Oct 21, 2026
Malicious code in peptide-modify (npm)
- Oct 21, 2026
Malware in peptide-modify
1 compromised version
- Oct 21, 2026
Malware in fnd-stores
1 compromised version
- Oct 21, 2026
Malicious code in my-auto-follow-eltio (npm)
- Oct 21, 2026
Malware in my-auto-follow-eltio
1 compromised version
- Oct 21, 2026
Malware in @dreamguyxeon/libsignal-node
1 compromised version
- Oct 21, 2026
Malware in @dreamguyxeon/baileyx
1 compromised version
Page 6 of 6,634