Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,070 total in npm · sorted newest first- Jun 1, 2026
Malicious code in @redhat-cloud-services/hcc-pf-mcp (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/hcc-kessel-mcp (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/frontend-components-utilities (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/frontend-components-translations (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/frontend-components-notifications (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/frontend-components-advisor-components (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/config-manager-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/compliance-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/sources-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/integrations-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/hcc-feo-mcp (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/frontend-components-testing (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/frontend-components-remediations (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/frontend-components-config (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/entitlements-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/types (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/topological-inventory-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/rule-components (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/rbac-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/quickstarts-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/frontend-components-config-utilities (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/frontend-components (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/eslint-config-redhat-cloud-services (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/chrome (npm)
3 compromised versions
- May 31, 2026
Malicious code in js-shared-modules (npm)
1 compromised version
- May 31, 2026
Malicious code in @challenger6/vm-pattern-library (npm)
1 compromised version
- May 30, 2026
Malicious code in retail-location-strategy-frontend (npm)
2 compromised versions
- May 30, 2026
Malicious code in cms-storehub (npm)
1 compromised version
- May 30, 2026
Malicious code in buffer-utilities (npm)
3 compromised versions
- May 29, 2026
Malware in @t-in-one/restore_application_hid_from_storage
1 compromised version
- May 29, 2026
Malware in @capibar.chat/ui-kit
1 compromised version
- May 29, 2026
Malware in @t-in-one/prefill_bundle_data_token
1 compromised version
- May 29, 2026
Malware in @t-in-one/safe_local_storage_token
1 compromised version
- May 29, 2026
Malware in @t-in-one/only_difference_payload
1 compromised version
- May 29, 2026
Malware in @t-in-one/get_application_hid
1 compromised version
- May 29, 2026
Malware in @t-in-one/prefill_transformers_data_token
1 compromised version
- May 29, 2026
Malware in @sber-ecom-core/sberpay-widget
1 compromised version
- May 29, 2026
Malware in @t-in-one/prefill_credit_data_token
1 compromised version
- May 29, 2026
Malware in @t-in-one/send_add_application
1 compromised version
- May 29, 2026
Malware in @t-in-one/add_application_tid
1 compromised version
- May 29, 2026
Malware in @t-in-one/form_product_token
1 compromised version
- May 29, 2026
Malware in @t-in-one/add_application_service_token
1 compromised version
- May 29, 2026
Malware in @t-in-one/application_id_storage_key_token
1 compromised version
- May 29, 2026
Malware in @t-in-one/save_application_hid_to_storage
1 compromised version
- May 29, 2026
Malware in @t-in-one/add_app_middleware_token
1 compromised version
- May 29, 2026
Malware in @t-in-one/add_application
1 compromised version
- May 29, 2026
Malware in @cloudplatform-single-spa/security-groups
1 compromised version
- May 29, 2026
Malware in @cloudplatform-single-spa/vpn
1 compromised version
- May 29, 2026
Malware in @cloudplatform-single-spa/floating-ips
1 compromised version
- May 29, 2026
Malware in @cloudplatform-single-spa/ml-ai-agents-agent-system
1 compromised version
Page 66 of 4,802