Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,070 total in npm · sorted newest first- Jun 5, 2026
Malicious code in dbmux (npm)
2 compromised versions
- Jun 5, 2026
Malicious code in creditcard.js (npm)
2 compromised versions
- Jun 5, 2026
Malicious code in create-wrangler-deploy (npm)
1 compromised version
- Jun 5, 2026
Malicious code in create-cf-token (npm)
2 compromised versions
- Jun 5, 2026
Malicious code in awaitly-visualizer (npm)
22 compromised versions
- Jun 5, 2026
Malicious code in awaitly-postgres (npm)
24 compromised versions
- Jun 5, 2026
Malicious code in awaitly-mongo (npm)
24 compromised versions
- Jun 5, 2026
Malicious code in awaitly-libsql (npm)
23 compromised versions
- Jun 5, 2026
Malicious code in awaitly-analyze (npm)
9 compromised versions
- Jun 5, 2026
Malicious code in awaitly (npm)
1 compromised version
- Jun 5, 2026
Malicious code in autotel-web (npm)
1 compromised version
- Jun 5, 2026
Malicious code in autotel-vitest (npm)
1 compromised version
- Jun 5, 2026
Malicious code in autotel-tanstack (npm)
1 compromised version
- Jun 5, 2026
Malicious code in autotel-subscribers (npm)
28 compromised versions
- Jun 5, 2026
Malicious code in autotel-sentry (npm)
1 compromised version
- Jun 5, 2026
Malicious code in autotel-plugins (npm)
1 compromised version
- Jun 5, 2026
Malicious code in autotel-playwright (npm)
1 compromised version
- Jun 5, 2026
Malicious code in autotel-pact (npm)
2 compromised versions
- Jun 5, 2026
Malicious code in autotel-mongoose (npm)
7 compromised versions
- Jun 5, 2026
Malicious code in autotel-mcp-instrumentation (npm)
6 compromised versions
- Jun 5, 2026
Malicious code in autotel-mcp (npm)
28 compromised versions
- Jun 5, 2026
Malicious code in autotel-hono (npm)
1 compromised version
- Jun 5, 2026
Malicious code in autotel-eventcatalog (npm)
5 compromised versions
- Jun 5, 2026
Malicious code in autotel-edge (npm)
1 compromised version
- Jun 5, 2026
Malicious code in autotel-drizzle (npm)
1 compromised version
- Jun 5, 2026
Malicious code in autotel-devtools (npm)
8 compromised versions
- Jun 5, 2026
Malicious code in autotel-cloudflare (npm)
1 compromised version
- Jun 5, 2026
Malicious code in autotel-cli (npm)
1 compromised version
- Jun 5, 2026
Malicious code in autotel-backends (npm)
1 compromised version
- Jun 5, 2026
Malicious code in autotel-aws (npm)
1 compromised version
- Jun 5, 2026
Malicious code in autotel-audit (npm)
1 compromised version
- Jun 5, 2026
Malicious code in autotel-adapters (npm)
1 compromised version
- Jun 5, 2026
Malicious code in autotel (npm)
2 compromised versions
- Jun 5, 2026
Malicious code in ai-sdk-ollama (npm)
4 compromised versions
- Jun 5, 2026
Malicious code in @vapi-ai/server-sdk (npm)
4 compromised versions
- Jun 5, 2026
Malicious code in @forjacms/sections-react (npm)
2 compromised versions
- Jun 5, 2026
Malicious code in @forjacms/sections (npm)
2 compromised versions
- Jun 5, 2026
Malicious code in @forjacms/client (npm)
2 compromised versions
- Jun 5, 2026
Malicious code in @forjacms/analytics (npm)
2 compromised versions
- Jun 5, 2026
Malicious code in @ethlete/types (npm)
1 compromised version
- Jun 5, 2026
Malicious code in @ethlete/theming (npm)
1 compromised version
- Jun 5, 2026
Malicious code in @ethlete/query (npm)
1 compromised version
- Jun 5, 2026
Malicious code in @ethlete/dsp (npm)
1 compromised version
- Jun 5, 2026
Malicious code in @ethlete/core (npm)
1 compromised version
- Jun 5, 2026
Malicious code in @ethlete/contentful (npm)
1 compromised version
- Jun 5, 2026
Malicious code in @ethlete/components (npm)
1 compromised version
- Jun 5, 2026
Malicious code in @ethlete/cli (npm)
1 compromised version
- Jun 5, 2026
Malicious code in @ethlete/cdk (npm)
1 compromised version
- Jun 5, 2026
Malicious code in @contaazul/n8n-nodes-contaazul (npm)
1 compromised version
- Jun 4, 2026
Malicious code in yaml-javascript (npm)
1 compromised version
Page 63 of 4,802