Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,073 total in npm · sorted newest first- May 29, 2026
Malware in @antv/t8
1 compromised version
- May 29, 2026
Malware in @antv/wx-f2
1 compromised version
- May 29, 2026
Malware in @antv/g-mobile-canvas-element
1 compromised version
- May 29, 2026
Malware in @antv/g-plugin-canvas-renderer
1 compromised version
- May 29, 2026
Malware in @antv/g-plugin-gesture
1 compromised version
- May 29, 2026
Malware in @antv/g-gesture
1 compromised version
- May 29, 2026
Malware in @antv/g6-extension-react
1 compromised version
- May 29, 2026
Malware in @antv/li-sdk
1 compromised version
- May 29, 2026
Malware in @antv/geo-coord
1 compromised version
- May 29, 2026
Malware in @antv/s2-react
1 compromised version
- May 29, 2026
Malware in @antv/l7-layers
1 compromised version
- May 29, 2026
Malware in @antv/l7-core
1 compromised version
- May 29, 2026
Malware in @antv/f-test-utils
1 compromised version
- May 29, 2026
Malware in @antv/dom-util
1 compromised version
- May 29, 2026
Malware in @antv/f-lottie
1 compromised version
- May 29, 2026
Malware in @allybank/ally-sdk
1 compromised version
- May 29, 2026
Malware in @antv/g2-extension-plot
1 compromised version
- May 29, 2026
Malware in @antv/g-canvaskit
1 compromised version
- May 29, 2026
Malware in @antv/g-plugin-3d
1 compromised version
- May 29, 2026
Malware in @antv/f6-ui
1 compromised version
- May 29, 2026
Malware in @antv/l7-component
1 compromised version
- May 29, 2026
Malware in @antv/g-components
1 compromised version
- May 29, 2026
Malware in @antv/g-plugin-device-renderer
1 compromised version
- May 29, 2026
Malware in @antv/g-plugin-rough-svg-renderer
1 compromised version
- May 29, 2026
Malware in @antv/g-lite
1 compromised version
- May 29, 2026
Malware in @antv/g-webgpu-engine
1 compromised version
- May 29, 2026
Malware in @antv/g-mobile-webgl
1 compromised version
- May 29, 2026
Malware in @antv/ava-react
1 compromised version
- May 29, 2026
Malware in @antv/g-mobile
1 compromised version
- May 29, 2026
Malware in @antv/g-lottie-player
1 compromised version
- May 29, 2026
Malware in @allyfinancial/allyfinancial-api
1 compromised version
- May 29, 2026
Malware in @antv/dw-random
1 compromised version
- May 29, 2026
Malware in customerdigital-ui-containers-lib
1 compromised version
- May 29, 2026
Malware in hellowornd
1 compromised version
- May 29, 2026
Malware in buffer-util-extend
1 compromised version
- May 29, 2026
Malicious code in tiny-naturalsort (npm)
- May 29, 2026
Malware in tiny-naturalsort
1 compromised version
- May 29, 2026
Malicious code in sorenson-webfonts (npm)
1 compromised version
- May 29, 2026
Malicious code in @t-in-one/send_add_application (npm)
- May 29, 2026
Malicious code in @t-in-one/safe_local_storage_token (npm)
- May 29, 2026
Malicious code in @t-in-one/restore_application_hid_from_storage (npm)
- May 29, 2026
Malicious code in @t-in-one/prefill_transformers_data_token (npm)
- May 29, 2026
Malicious code in @t-in-one/prefill_credit_data_token (npm)
- May 29, 2026
Malicious code in @t-in-one/prefill_bundle_data_token (npm)
- May 29, 2026
Malicious code in @t-in-one/only_difference_payload (npm)
- May 29, 2026
Malicious code in @t-in-one/get_application_hid (npm)
- May 29, 2026
Malicious code in @t-in-one/form_product_token (npm)
- May 29, 2026
Malicious code in @t-in-one/application_id_storage_key_token (npm)
- May 29, 2026
Malicious code in @t-in-one/add_application_tid (npm)
- May 29, 2026
Malicious code in @t-in-one/add_application_service_token (npm)
Page 71 of 4,802